Accepting request 998247 from home:crameleon:branches:network:telephony

Adjust hardening, README and license year

OBS-URL: https://build.opensuse.org/request/show/998247
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=22

README.SUSE

@@ -1,12 +1,13 @@
 Configuration files:
-  * /etc/coturn/turnserver.conf is the mail configuration file
+  * /etc/coturn/turnserver.conf is the main configuration file
   * /etc/sysconfig/coturn can be used to set additional command line parameters
 
-To allow traffic going thru the firewall use
+Allow traffic through the firewall:
 ```
-firewall-cmd --zone=public --add-service=coturn [--permanent]
+firewall-cmd --zone=<zone> --add-service=coturn [--permanent]
 ```
 
+Notes:
 * /etc/syconfig/coturn has the option '--no-software-attribute' enabled to hide 
   the software version for production issue.
 

coturn.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Aug 19 19:25:35 UTC 2022 - Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>
+
+- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)
+
 -------------------------------------------------------------------
 Mon Oct 18 14:55:57 UTC 2021 - Michael Ströder <michael@stroeder.com>
 

coturn.service

@@ -49,7 +49,7 @@ RestrictSUIDSGID=yes
 RestrictRealtime=true
 # end of automatic additions 
 SystemCallArchitectures=native
-SystemCallFilter=~@clock @debug @module @mount @raw-io @reboot @swap @privileged @resources @cpu-emulation @obsolete
+SystemCallFilter=~@clock @debug @module @mount @raw-io @reboot @swap @resources @cpu-emulation @obsolete
 
 [Install]
 WantedBy=multi-user.target

coturn.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package coturn
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed