From dc346218a1c496ea1ff4a689d712ca1cce22d63e2f05b31a5754daf38b53c850 Mon Sep 17 00:00:00 2001 From: Martin Hauke Date: Fri, 15 Oct 2021 14:54:13 +0000 Subject: [PATCH] Accepting request 925455 from home:jsegitz:branches:systemdhardening_protectclock - Drop ProtectClock hardening, can cause issues if other device acceess is needed OBS-URL: https://build.opensuse.org/request/show/925455 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=34 --- frr.changes | 5 +++++ harden_frr.service.patch | 6 ++---- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/frr.changes b/frr.changes index f5b96db..b72ce92 100644 --- a/frr.changes +++ b/frr.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Oct 15 12:11:50 UTC 2021 - Johannes Segitz + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + ------------------------------------------------------------------- Sat Oct 9 01:58:08 UTC 2021 - Linnaea Lavia diff --git a/harden_frr.service.patch b/harden_frr.service.patch index 8b03ed3..5267b21 100644 --- a/harden_frr.service.patch +++ b/harden_frr.service.patch @@ -2,7 +2,7 @@ Index: frr-frr-8.0.1/tools/frr.service.in =================================================================== --- frr-frr-8.0.1.orig/tools/frr.service.in +++ frr-frr-8.0.1/tools/frr.service.in -@@ -7,6 +7,16 @@ Before=network.target +@@ -7,6 +7,15 @@ Before=network.target OnFailure=heartbeat-failed@%n [Service] @@ -10,7 +10,6 @@ Index: frr-frr-8.0.1/tools/frr.service.in +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true -+ProtectClock=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true @@ -23,7 +22,7 @@ Index: frr-frr-8.0.1/tools/frr@.service.in =================================================================== --- frr-frr-8.0.1.orig/tools/frr@.service.in +++ frr-frr-8.0.1/tools/frr@.service.in -@@ -7,6 +7,16 @@ Before=network.target +@@ -7,6 +7,15 @@ Before=network.target OnFailure=heartbeat-failed@%n [Service] @@ -31,7 +30,6 @@ Index: frr-frr-8.0.1/tools/frr@.service.in +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true -+ProtectClock=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true