Accepting request 934727 from home:jsegitz:branches:Base:System
- Remove PrivateDevices, ProtectClock and ProtectKernelLogs=true from klog.service and ProtectKernelLogs from klogd.service (bsc#1193172) OBS-URL: https://build.opensuse.org/request/show/934727 OBS-URL: https://build.opensuse.org/package/show/Base:System/syslogd?expand=0&rev=152
This commit is contained in:
@@ -29,12 +29,9 @@ ConditionPathIsDirectory=/var/log
|
||||
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||
ProtectSystem=full
|
||||
ProtectHome=true
|
||||
PrivateDevices=true
|
||||
ProtectHostname=true
|
||||
ProtectClock=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelLogs=true
|
||||
ProtectControlGroups=true
|
||||
RestrictRealtime=true
|
||||
# end of automatic additions
|
||||
|
Reference in New Issue
Block a user