diff --git a/klog.service b/klog.service index 9140e9c..05c89dc 100644 --- a/klog.service +++ b/klog.service @@ -29,12 +29,9 @@ ConditionPathIsDirectory=/var/log # https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort ProtectSystem=full ProtectHome=true -PrivateDevices=true ProtectHostname=true -ProtectClock=true ProtectKernelTunables=true ProtectKernelModules=true -ProtectKernelLogs=true ProtectControlGroups=true RestrictRealtime=true # end of automatic additions diff --git a/klogd.service b/klogd.service index 277afa1..47a449e 100644 --- a/klogd.service +++ b/klogd.service @@ -35,7 +35,6 @@ ProtectHostname=true ProtectClock=true ProtectKernelTunables=true ProtectKernelModules=true -ProtectKernelLogs=true ProtectControlGroups=true RestrictRealtime=true # end of automatic additions diff --git a/syslogd.changes b/syslogd.changes index e8bec7b..e8d392c 100644 --- a/syslogd.changes +++ b/syslogd.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Nov 30 13:20:31 UTC 2021 - Johannes Segitz + +- Remove PrivateDevices, ProtectClock and ProtectKernelLogs=true + from klog.service and ProtectKernelLogs from klogd.service + (bsc#1193172) + ------------------------------------------------------------------- Wed Nov 24 10:22:12 UTC 2021 - Johannes Segitz diff --git a/syslogd.spec b/syslogd.spec index 7f88502..0d42b94 100644 --- a/syslogd.spec +++ b/syslogd.spec @@ -1,7 +1,7 @@ # # spec file for package syslogd # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed