Accepting request 935468 from Base:System

- Remove PrivateDevices, ProtectClock and ProtectKernelLogs=true
  from klog.service and ProtectKernelLogs from klogd.service
  (bsc#1193172) (forwarded request 934727 from jsegitz)

OBS-URL: https://build.opensuse.org/request/show/935468
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/syslogd?expand=0&rev=96

klog.service

@@ -29,12 +29,9 @@ ConditionPathIsDirectory=/var/log
 # https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
 ProtectSystem=full
 ProtectHome=true
-PrivateDevices=true
 ProtectHostname=true
-ProtectClock=true
 ProtectKernelTunables=true
 ProtectKernelModules=true
-ProtectKernelLogs=true
 ProtectControlGroups=true
 RestrictRealtime=true
 # end of automatic additions 

klogd.service

@@ -35,7 +35,6 @@ ProtectHostname=true
 ProtectClock=true
 ProtectKernelTunables=true
 ProtectKernelModules=true
-ProtectKernelLogs=true
 ProtectControlGroups=true
 RestrictRealtime=true
 # end of automatic additions 

syslogd.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Nov 30 13:20:31 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
+
+- Remove PrivateDevices, ProtectClock and ProtectKernelLogs=true
+  from klog.service and ProtectKernelLogs from klogd.service
+  (bsc#1193172)
+
 -------------------------------------------------------------------
 Wed Nov 24 10:22:12 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
 

syslogd.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package syslogd
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed