Michal Suchanek
5387a09f7b
- Build with systemd development files to prevent service timeouts (https://github.com/wertarbyte/triggerhappy/pull/17) - Remove 0001-Fix-systemd-service.patch - Spec file cleanup OBS-URL: https://build.opensuse.org/request/show/990722 OBS-URL: https://build.opensuse.org/package/show/hardware/triggerhappy?expand=0&rev=6
23 lines
847 B
Diff
23 lines
847 B
Diff
Index: triggerhappy-release-0.5.0/systemd/triggerhappy.service
|
|
===================================================================
|
|
--- triggerhappy-release-0.5.0.orig/systemd/triggerhappy.service
|
|
+++ triggerhappy-release-0.5.0/systemd/triggerhappy.service
|
|
@@ -3,6 +3,17 @@ Description=triggerhappy global hotkey d
|
|
After=local-fs.target
|
|
|
|
[Service]
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectSystem=full
|
|
+ProtectHome=true
|
|
+ProtectHostname=true
|
|
+ProtectKernelTunables=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+RestrictRealtime=true
|
|
+# end of automatic additions
|
|
Type=notify
|
|
ExecStart=/usr/sbin/thd --triggers /etc/triggerhappy/triggers.d/ --socket /run/thd.socket --user nobody --deviceglob /dev/input/event*
|
|
|