tgt/harden_tgtd.service.patch
Dirk Mueller 5971eaaae4 - Update to version v1.0.92 (from 1.0.89):
* fix arm64 compilation
  * do not rely on non-portable __WORDSIZE nor LFS64 interfaces
  * Enabled thin-provision option for discarding ranges from block
    devices, that supporting discard

OBS-URL: https://build.opensuse.org/package/show/Base:System/tgt?expand=0&rev=63
2024-08-31 09:24:29 +00:00

21 lines
633 B
Diff

Index: tgt-1.0.92/scripts/tgtd.service
===================================================================
--- tgt-1.0.92.orig/scripts/tgtd.service
+++ tgt-1.0.92/scripts/tgtd.service
@@ -9,6 +9,15 @@ After=network.target
ConditionPathExists=/etc/tgt/targets.conf
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelLogs=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
Environment=TGTD_CONFIG=/etc/tgt/targets.conf