diff --git a/coturn.changes b/coturn.changes index 3fa5c12..5ccc659 100644 --- a/coturn.changes +++ b/coturn.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Oct 15 12:11:35 UTC 2021 - Johannes Segitz + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + ------------------------------------------------------------------- Mon Aug 30 11:55:53 UTC 2021 - Johannes Segitz diff --git a/harden_coturn.service.patch b/harden_coturn.service.patch index 197473b..ec07154 100644 --- a/harden_coturn.service.patch +++ b/harden_coturn.service.patch @@ -2,7 +2,7 @@ Index: coturn-4.5.2/examples/etc/coturn.service =================================================================== --- coturn-4.5.2.orig/examples/etc/coturn.service +++ coturn-4.5.2/examples/etc/coturn.service -@@ -15,6 +15,18 @@ ExecStart=/usr/bin/turnserver -c /etc/tu +@@ -15,6 +15,17 @@ ExecStart=/usr/bin/turnserver -c /etc/tu Restart=on-failure InaccessibleDirectories=/home PrivateTmp=yes @@ -11,7 +11,6 @@ Index: coturn-4.5.2/examples/etc/coturn.service +ProtectSystem=full +ProtectHome=true +ProtectHostname=true -+ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true