sanlock/harden_sanlk-resetd.service.patch
James Fehlig 8bb7790de7 Accepting request 1029797 from home:jfehlig:branches:Virtualization
- Update to sanlock 3.8.5
  - python: Replace distutils with setuptools
  - sanlock: fix memory leak of lockspace renewal_history
  - sanlock: fix pthread_create error check
  - sanlock: use helper to set max_sectors_kb

OBS-URL: https://build.opensuse.org/request/show/1029797
OBS-URL: https://build.opensuse.org/package/show/Virtualization/sanlock?expand=0&rev=68
2022-10-18 17:46:53 +00:00

23 lines
714 B
Diff

Index: sanlock-3.8.5/init.d/sanlk-resetd.service
===================================================================
--- sanlock-3.8.5.orig/init.d/sanlk-resetd.service
+++ sanlock-3.8.5/init.d/sanlk-resetd.service
@@ -4,6 +4,17 @@ After=wdmd.service sanlock.service
Requires=wdmd.service sanlock.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
ExecStart=/usr/sbin/sanlk-resetd