pool/coturn
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 925475 from network:telephony

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/925475
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=9
This commit is contained in:
Dominique Leuenberger 2021-10-15 21:04:30 +00:00 committed by Git OBS Bridge
commit 4405ce6f6d
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
coturn.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 15 12:11:35 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Aug 30 11:55:53 UTC 2021 - Johannes Segitz <jsegitz@suse.com> Mon Aug 30 11:55:53 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

3
harden_coturn.service.patch
View File

@ -2,7 +2,7 @@ Index: coturn-4.5.2/examples/etc/coturn.service
=================================================================== ===================================================================
--- coturn-4.5.2.orig/examples/etc/coturn.service --- coturn-4.5.2.orig/examples/etc/coturn.service
+++ coturn-4.5.2/examples/etc/coturn.service +++ coturn-4.5.2/examples/etc/coturn.service
@@ -15,6 +15,18 @@ ExecStart=/usr/bin/turnserver -c /etc/tu @@ -15,6 +15,17 @@ ExecStart=/usr/bin/turnserver -c /etc/tu
Restart=on-failure Restart=on-failure
InaccessibleDirectories=/home InaccessibleDirectories=/home
PrivateTmp=yes PrivateTmp=yes
@ -11,7 +11,6 @@ Index: coturn-4.5.2/examples/etc/coturn.service
+ProtectSystem=full +ProtectSystem=full
+ProtectHome=true +ProtectHome=true
+ProtectHostname=true +ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true +ProtectKernelTunables=true
+ProtectKernelModules=true +ProtectKernelModules=true
+ProtectKernelLogs=true +ProtectKernelLogs=true