pool/coturn
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 925450 from home:jsegitz:branches:systemdhardening_protectclock

Browse Source 
- Drop ProtectClock hardening, can cause issues if other device acceess is needed

OBS-URL: https://build.opensuse.org/request/show/925450
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=20
This commit is contained in:
Johannes Weberhofer 2021-10-15 14:04:20 +00:00 committed by Git OBS Bridge
parent 23890538db
commit df6f7fba40
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
coturn.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 15 12:11:35 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
-------------------------------------------------------------------
Mon Aug 30 11:55:53 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

3
harden_coturn.service.patch
View File

@ -2,7 +2,7 @@ Index: coturn-4.5.2/examples/etc/coturn.service
===================================================================
--- coturn-4.5.2.orig/examples/etc/coturn.service
+++ coturn-4.5.2/examples/etc/coturn.service
@@ -15,6 +15,18 @@ ExecStart=/usr/bin/turnserver -c /etc/tu
@@ -15,6 +15,17 @@ ExecStart=/usr/bin/turnserver -c /etc/tu
Restart=on-failure
InaccessibleDirectories=/home
PrivateTmp=yes
@ -11,7 +11,6 @@ Index: coturn-4.5.2/examples/etc/coturn.service
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true