forked from pool/bitcoin
e3e27be21f
- Update to version 24.0.1 changelogs: * https://bitcoincore.org/en/releases/24.0.1/ * https://bitcoincore.org/en/releases/23.0/ * https://bitcoincore.org/en/releases/22.1/ - fixed upstream version number change: it's not 0.x anymore` OBS-URL: https://build.opensuse.org/request/show/1043940 OBS-URL: https://build.opensuse.org/package/show/network:cryptocurrencies/bitcoin?expand=0&rev=49
22 lines
823 B
Diff
22 lines
823 B
Diff
Index: bitcoin-24.0.1/contrib/init/bitcoind.service
|
|
===================================================================
|
|
--- bitcoin-24.0.1.orig/contrib/init/bitcoind.service
|
|
+++ bitcoin-24.0.1/contrib/init/bitcoind.service
|
|
@@ -74,6 +74,16 @@ NoNewPrivileges=true
|
|
# Use a new /dev namespace only populated with API pseudo devices
|
|
# such as /dev/null, /dev/zero and /dev/random.
|
|
PrivateDevices=true
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectHostname=true
|
|
+ProtectClock=true
|
|
+ProtectKernelTunables=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+RestrictRealtime=true
|
|
+# end of automatic additions
|
|
|
|
# Deny the creation of writable and executable memory mappings.
|
|
MemoryDenyWriteExecute=true
|