Accepting request 946921 from home:jsegitz:branches:network:dhcp

- Drop PrivateDevices and ProtectClock hardenings. They clash with
  the chroot logic (bsc#1194722)

OBS-URL: https://build.opensuse.org/request/show/946921
OBS-URL: https://build.opensuse.org/package/show/network:dhcp/dhcp?expand=0&rev=239
This commit is contained in:
Reinhard Max 2022-01-17 10:42:10 +00:00 committed by Git OBS Bridge
parent 84afc13868
commit 92a09ecba6
6 changed files with 7 additions and 9 deletions

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Mon Jan 17 08:52:07 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
- Drop PrivateDevices and ProtectClock hardenings. They clash with
the chroot logic (bsc#1194722)
-------------------------------------------------------------------
Fri Jan 14 13:19:38 UTC 2022 - Callum Farmer <gmbr3@opensuse.org>

@ -1,7 +1,7 @@
#
# spec file for package dhcp
#
# Copyright (c) 2021 SUSE LLC
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed

@ -8,8 +8,6 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target slapd.s
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true

@ -8,8 +8,6 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target slapd.s
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true

@ -8,8 +8,6 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target ldap.se
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true

@ -8,8 +8,6 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target ldap.se
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true