diff --git a/frr.changes b/frr.changes index f5b96db..b72ce92 100644 --- a/frr.changes +++ b/frr.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Oct 15 12:11:50 UTC 2021 - Johannes Segitz + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + ------------------------------------------------------------------- Sat Oct 9 01:58:08 UTC 2021 - Linnaea Lavia diff --git a/harden_frr.service.patch b/harden_frr.service.patch index 8b03ed3..5267b21 100644 --- a/harden_frr.service.patch +++ b/harden_frr.service.patch @@ -2,7 +2,7 @@ Index: frr-frr-8.0.1/tools/frr.service.in =================================================================== --- frr-frr-8.0.1.orig/tools/frr.service.in +++ frr-frr-8.0.1/tools/frr.service.in -@@ -7,6 +7,16 @@ Before=network.target +@@ -7,6 +7,15 @@ Before=network.target OnFailure=heartbeat-failed@%n [Service] @@ -10,7 +10,6 @@ Index: frr-frr-8.0.1/tools/frr.service.in +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true -+ProtectClock=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true @@ -23,7 +22,7 @@ Index: frr-frr-8.0.1/tools/frr@.service.in =================================================================== --- frr-frr-8.0.1.orig/tools/frr@.service.in +++ frr-frr-8.0.1/tools/frr@.service.in -@@ -7,6 +7,16 @@ Before=network.target +@@ -7,6 +7,15 @@ Before=network.target OnFailure=heartbeat-failed@%n [Service] @@ -31,7 +30,6 @@ Index: frr-frr-8.0.1/tools/frr@.service.in +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true -+ProtectClock=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true