pool/ndppd
SHA256
4
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Accepting request 925472 from home:jsegitz:branches:systemdhardening_protectclock

Browse Source 
- Drop ProtectClock hardening, can cause issues if other device acceess is needed

OBS-URL: https://build.opensuse.org/request/show/925472
OBS-URL: https://build.opensuse.org/package/show/network/ndppd?expand=0&rev=6
This commit is contained in:
Martin Hauke 2021-10-15 14:54:24 +00:00 committed by Git OBS Bridge
parent a50cc09f16
commit 689e075026
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
harden_ndppd.service.patch
View File

@ -2,7 +2,7 @@ Index: ndppd-0.2.5.43/ndppd.service
=================================================================== ===================================================================
--- ndppd-0.2.5.43.orig/ndppd.service --- ndppd-0.2.5.43.orig/ndppd.service
+++ ndppd-0.2.5.43/ndppd.service +++ ndppd-0.2.5.43/ndppd.service
@@ -3,6 +3,18 @@ Description=NDP Proxy Daemon @@ -3,6 +3,17 @@ Description=NDP Proxy Daemon
After=network.target After=network.target
[Service] [Service]
@ -11,7 +11,6 @@ Index: ndppd-0.2.5.43/ndppd.service
+ProtectSystem=full +ProtectSystem=full
+ProtectHome=true +ProtectHome=true
+ProtectHostname=true +ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true +ProtectKernelTunables=true
+ProtectKernelModules=true +ProtectKernelModules=true
+ProtectKernelLogs=true +ProtectKernelLogs=true

5
ndppd.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 15 12:12:41 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Oct 11 07:23:40 UTC 2021 - Johannes Segitz <jsegitz@suse.com> Mon Oct 11 07:23:40 UTC 2021 - Johannes Segitz <jsegitz@suse.com>