diff --git a/2ping.changes b/2ping.changes index 1adc6c3..9b88d75 100644 --- a/2ping.changes +++ b/2ping.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue Aug 10 09:28:47 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s). Added patch(es): + * harden_2ping.service.patch + ------------------------------------------------------------------- Mon Jun 14 09:56:20 UTC 2021 - Jiri Slaby diff --git a/2ping.spec b/2ping.spec index ae69743..2f67f8a 100644 --- a/2ping.spec +++ b/2ping.spec @@ -25,6 +25,7 @@ URL: https://www.finnie.org/software/2ping/ Source0: https://www.finnie.org/software/2ping/%{name}-%{version}.tar.gz Source1: https://www.finnie.org/software/2ping/%{name}-%{version}.tar.gz.asc Source2: %{name}.keyring +Patch0: harden_2ping.service.patch BuildRequires: fdupes BuildRequires: python3-devel >= 3.6 BuildRequires: python3-distro diff --git a/harden_2ping.service.patch b/harden_2ping.service.patch new file mode 100644 index 0000000..3a8b75e --- /dev/null +++ b/harden_2ping.service.patch @@ -0,0 +1,16 @@ +Index: 2ping-4.5.1/2ping.service +=================================================================== +--- 2ping-4.5.1.orig/2ping.service ++++ 2ping-4.5.1/2ping.service +@@ -30,6 +30,11 @@ RestrictAddressFamilies=AF_NETLINK AF_IN + RestrictNamespaces=yes + RestrictRealtime=yes + RestrictSUIDSGID=yes ++# added automatically, for details please see ++# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort ++ProtectHostname=true ++ProtectClock=true ++# end of automatic additions + User=nobody + + [Install]