Accepting request 934672 from home:jsegitz:branches:server:monitoring

- Removed
  * PrivateDevices=true
  * ProtectClock=true
  * RestrictRealtime=true
  from munin-node.service (bsc#1193118)

OBS-URL: https://build.opensuse.org/request/show/934672
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/munin?expand=0&rev=70
This commit is contained in:
Wolfgang Rosenauer 2021-11-30 07:52:09 +00:00 committed by Git OBS Bridge
parent 1d79aa82f6
commit ca22669249
2 changed files with 9 additions and 3 deletions

View File

@ -7,14 +7,11 @@ Requires=network.target
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
# end of automatic additions
Type=forking
ExecStart=/usr/sbin/munin-node

View File

@ -1,3 +1,12 @@
-------------------------------------------------------------------
Mon Nov 29 15:46:03 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Removed
* PrivateDevices=true
* ProtectClock=true
* RestrictRealtime=true
from munin-node.service (bsc#1193118)
-------------------------------------------------------------------
Thu Oct 7 10:26:31 UTC 2021 - Johannes Segitz <jsegitz@suse.com>