Martin Hauke
f171d97fa0
- Update to version 1.20.5
* revert previous fix from 1.20.4, make it optional.
- Update to version 1.20.4
* fix "Peer refused to agree to his IP address" message.
- Update to version 1.20.3
* minor change in a warning message.
* documentation improvement.
* minor changes in build and test files.
- Update to version 1.20.2
* fix regression: do attempt to apply duplicate routes, log
INFO instead of WARN.
* minor changes in log messages.
- Update patch:
* harden_openfortivpn@.service.patch
OBS-URL: https://build.opensuse.org/request/show/1096575
OBS-URL: https://build.opensuse.org/package/show/network:vpn/openfortivpn?expand=0&rev=44
23 lines
811 B
Diff
23 lines
811 B
Diff
diff --git a/lib/systemd/system/openfortivpn@.service.in b/lib/systemd/system/openfortivpn@.service.in
|
|
index 1249037..741ae07 100644
|
|
--- a/lib/systemd/system/openfortivpn@.service.in
|
|
+++ b/lib/systemd/system/openfortivpn@.service.in
|
|
@@ -9,6 +9,17 @@ Documentation=https://github.com/adrienverge/openfortivpn/wiki
|
|
[Service]
|
|
Type=notify
|
|
PrivateTmp=true
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectSystem=full
|
|
+ProtectHome=true
|
|
+ProtectHostname=true
|
|
+ProtectKernelTunables=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+RestrictRealtime=true
|
|
+# end of automatic additions
|
|
ExecStart=@BINDIR@/openfortivpn -c @SYSCONFDIR@/openfortivpn/%I.conf
|
|
Restart=on-failure
|
|
OOMScoreAdjust=-100
|