Accepting request 925454 from home:jsegitz:branches:systemdhardening_protectclock

- Drop ProtectClock hardening, can cause issues if other device acceess is needed

OBS-URL: https://build.opensuse.org/request/show/925454
OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/fluidsynth?expand=0&rev=95

fluidsynth.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Oct 15 12:11:47 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
+
+- Drop ProtectClock hardening, can cause issues if other device acceess is needed
+
 -------------------------------------------------------------------
 Tue Sep 14 09:59:43 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
 

fluidsynth.service

@@ -9,7 +9,6 @@ After=sound.target
 ProtectSystem=full
 ProtectHome=true
 ProtectHostname=true
-ProtectClock=true
 ProtectKernelTunables=true
 ProtectKernelModules=true
 ProtectKernelLogs=true

harden_fluidsynth.service.patch

@@ -2,7 +2,7 @@ Index: fluidsynth-2.2.2/fluidsynth.service.in
 ===================================================================
 --- fluidsynth-2.2.2.orig/fluidsynth.service.in
 +++ fluidsynth-2.2.2/fluidsynth.service.in
-@@ -4,6 +4,17 @@ Documentation=man:fluidsynth(1)
+@@ -4,6 +4,16 @@ Documentation=man:fluidsynth(1)
  After=sound.target
  
  [Service]
@@ -11,7 +11,6 @@ Index: fluidsynth-2.2.2/fluidsynth.service.in
 +ProtectSystem=full
 +ProtectHome=true
 +ProtectHostname=true
-+ProtectClock=true
 +ProtectKernelTunables=true
 +ProtectKernelModules=true
 +ProtectKernelLogs=true