pool/frr
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 925455 from home:jsegitz:branches:systemdhardening_protectclock

Browse Source 
- Drop ProtectClock hardening, can cause issues if other device acceess is needed

OBS-URL: https://build.opensuse.org/request/show/925455
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=34
This commit is contained in:
Martin Hauke 2021-10-15 14:54:13 +00:00 committed by Git OBS Bridge
parent 2f62ce9820
commit dc346218a1
2 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
frr.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 15 12:11:50 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
------------------------------------------------------------------- -------------------------------------------------------------------
Sat Oct 9 01:58:08 UTC 2021 - Linnaea Lavia <linnaea@lavia.moe> Sat Oct 9 01:58:08 UTC 2021 - Linnaea Lavia <linnaea@lavia.moe>

6
harden_frr.service.patch
View File

@ -2,7 +2,7 @@ Index: frr-frr-8.0.1/tools/frr.service.in
=================================================================== ===================================================================
--- frr-frr-8.0.1.orig/tools/frr.service.in --- frr-frr-8.0.1.orig/tools/frr.service.in
+++ frr-frr-8.0.1/tools/frr.service.in +++ frr-frr-8.0.1/tools/frr.service.in
@@ -7,6 +7,16 @@ Before=network.target @@ -7,6 +7,15 @@ Before=network.target
OnFailure=heartbeat-failed@%n OnFailure=heartbeat-failed@%n
[Service] [Service]
@ -10,7 +10,6 @@ Index: frr-frr-8.0.1/tools/frr.service.in
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full +ProtectSystem=full
+ProtectHome=true +ProtectHome=true
+ProtectClock=true
+ProtectKernelModules=true +ProtectKernelModules=true
+ProtectKernelLogs=true +ProtectKernelLogs=true
+ProtectControlGroups=true +ProtectControlGroups=true
@ -23,7 +22,7 @@ Index: frr-frr-8.0.1/tools/frr@.service.in
=================================================================== ===================================================================
--- frr-frr-8.0.1.orig/tools/frr@.service.in --- frr-frr-8.0.1.orig/tools/frr@.service.in
+++ frr-frr-8.0.1/tools/frr@.service.in +++ frr-frr-8.0.1/tools/frr@.service.in
@@ -7,6 +7,16 @@ Before=network.target @@ -7,6 +7,15 @@ Before=network.target
OnFailure=heartbeat-failed@%n OnFailure=heartbeat-failed@%n
[Service] [Service]
@ -31,7 +30,6 @@ Index: frr-frr-8.0.1/tools/frr@.service.in
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full +ProtectSystem=full
+ProtectHome=true +ProtectHome=true
+ProtectClock=true
+ProtectKernelModules=true +ProtectKernelModules=true
+ProtectKernelLogs=true +ProtectKernelLogs=true
+ProtectControlGroups=true +ProtectControlGroups=true