e6d68f710a
After repeated similar requests to change the ID ranges we set the above mentioned value to 201. The max value will stay at 499. This range should be sufficient and will give us leeway for the future. It's not straightforward to find out which static UIDs/GIDs are used in all packages. Update shadow-login_defs-suse.patch OBS-URL: https://build.opensuse.org/package/show/Base:System/shadow?expand=0&rev=191
24 lines
584 B
Desktop File
24 lines
584 B
Desktop File
[Unit]
|
|
Description=Verify integrity of password and group files
|
|
|
|
[Service]
|
|
# added automatically, for details please see
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
ProtectSystem=full
|
|
ProtectHome=read-only
|
|
PrivateDevices=true
|
|
ProtectHostname=true
|
|
ProtectClock=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectKernelLogs=true
|
|
ProtectControlGroups=true
|
|
RestrictRealtime=true
|
|
# end of automatic additions
|
|
Type=oneshot
|
|
ExecStart=/usr/sbin/pwck -r
|
|
ExecStart=/usr/sbin/grpck -r
|
|
Nice=19
|
|
IOSchedulingClass=best-effort
|
|
IOSchedulingPriority=7
|