From 970d79bef9c8846bc8cc308e11ad70d627406fd0dc93b1dc7a8dafc2ec70bf34 Mon Sep 17 00:00:00 2001 From: Jiri Slaby Date: Wed, 17 Aug 2022 11:41:52 +0000 Subject: [PATCH] Accepting request 925443 from home:jsegitz:branches:systemdhardening_protectclock - Drop ProtectClock hardening, can cause issues if other device acceess is needed OBS-URL: https://build.opensuse.org/request/show/925443 OBS-URL: https://build.opensuse.org/package/show/network:utilities/2ping?expand=0&rev=32 --- 2ping.changes | 5 +++++ harden_2ping.service.patch | 3 +-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/2ping.changes b/2ping.changes index 9b88d75..b21c99a 100644 --- a/2ping.changes +++ b/2ping.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Oct 15 11:48:55 UTC 2021 - Johannes Segitz + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + ------------------------------------------------------------------- Tue Aug 10 09:28:47 UTC 2021 - Johannes Segitz diff --git a/harden_2ping.service.patch b/harden_2ping.service.patch index 3a8b75e..7f62251 100644 --- a/harden_2ping.service.patch +++ b/harden_2ping.service.patch @@ -2,14 +2,13 @@ Index: 2ping-4.5.1/2ping.service =================================================================== --- 2ping-4.5.1.orig/2ping.service +++ 2ping-4.5.1/2ping.service -@@ -30,6 +30,11 @@ RestrictAddressFamilies=AF_NETLINK AF_IN +@@ -30,6 +30,10 @@ RestrictAddressFamilies=AF_NETLINK AF_IN RestrictNamespaces=yes RestrictRealtime=yes RestrictSUIDSGID=yes +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectHostname=true -+ProtectClock=true +# end of automatic additions User=nobody