shairport-sync/harden_shairport-sync.service.patch
Takashi Iwai e783f8e61e - Update version to 4.3.7
- This update comprises updates to GitHub Actions used for testing and for
    building Docker.
- Update version to 4.3.6
  - Bug fixes
    - Fix a potential bug (no issues reported) by checking that a buffer is not
      zero before attempting to deallocate it.
  - Documentation updates
    - Show how to use MQTTThing with Homebridge to represent Shairport Sync’s
      active status.
    - Correct and clarify the statistics documentation.
  - Fix a typo in the configuration file.

OBS-URL: https://build.opensuse.org/package/show/multimedia:apps/shairport-sync?expand=0&rev=45
2025-02-04 08:50:21 +00:00

43 lines
1.4 KiB
Diff

diff --git a/scripts/shairport-sync.service-avahi.in b/scripts/shairport-sync.service-avahi.in
index 4a874c54..6bc80c1e 100644
--- a/scripts/shairport-sync.service-avahi.in
+++ b/scripts/shairport-sync.service-avahi.in
@@ -7,6 +7,16 @@ Wants=network-online.target
After=network.target network-online.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+# end of automatic additions
ExecStart=@prefix@/bin/shairport-sync --log-to-syslog
User=shairport-sync
Group=shairport-sync
diff --git a/scripts/shairport-sync.service.in b/scripts/shairport-sync.service.in
index 18df3f35..791fd89f 100644
--- a/scripts/shairport-sync.service.in
+++ b/scripts/shairport-sync.service.in
@@ -5,6 +5,16 @@ Wants=network-online.target
After=network.target network-online.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+# end of automatic additions
ExecStart=@prefix@/bin/shairport-sync --log-to-syslog
User=shairport-sync
Group=shairport-sync