Accepting request 934727 from home:jsegitz:branches:Base:System

- Remove PrivateDevices, ProtectClock and ProtectKernelLogs=true
  from klog.service and ProtectKernelLogs from klogd.service
  (bsc#1193172)

OBS-URL: https://build.opensuse.org/request/show/934727
OBS-URL: https://build.opensuse.org/package/show/Base:System/syslogd?expand=0&rev=152
This commit is contained in:
2021-12-03 14:01:42 +00:00
committed by Git OBS Bridge
parent 5c7a2ac7f8
commit 50e35a55d8
4 changed files with 8 additions and 5 deletions

View File

@@ -29,12 +29,9 @@ ConditionPathIsDirectory=/var/log
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
# end of automatic additions