rpm/e2fsprogs
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1e927b7b24
e2fsprogs/harden_e2scrub_all.service.patch

23 lines
750 B
Diff
Raw Normal View History

Accepting request 1063788 from home:polslinux:branches:filesystems - Update to 1.47.0: * Add support for the orphan_file feature, which speeds up workloads that are deleting or truncating a large number files in parallel. This compat feature was first supported in the v5.15 Linux kernel. * The mke2fs program (via the mke2fs.conf file) now enables the metadata_csum_seed and orphan_file features by default. The metadata_csum_seed feature is an incompat feature which is first supported in the Linux kernel starting in the 4.4 kernel. * Mke2fs now supports the extended option "assume_storage_prezeroed" which causes mke2fs to skip zeroing the journal and inode tables and to mark the inode tables as zeroed. * Add support to tune2fs and e2label to set the label and UUID for a mounted file system using a ioctl, which is more reliable than modifying the superblock via writing to the block device. The kernel support for setting the label landed in v5.17, while the support for adding the UUID landed in v6.0. If the ioctls are not supported, tune2fs and e2label will fall back old strategy of directly modifying the superblock. * Allow tune2fs to disable the casefold feature after scanning all of the directories do not have the Casefold flag set. OBS-URL: https://build.opensuse.org/request/show/1063788 OBS-URL: https://build.opensuse.org/package/show/filesystems/e2fsprogs?expand=0&rev=154
2023-02-08 13:21:46 +01:00
Index: e2fsprogs-1.47.0/scrub/e2scrub_all.service.in
Accepting request 918932 from home:jsegitz:branches:systemdhardening:filesystems Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/918932 OBS-URL: https://build.opensuse.org/package/show/filesystems/e2fsprogs?expand=0&rev=142
2021-09-15 11:02:50 +02:00
===================================================================
Accepting request 1063788 from home:polslinux:branches:filesystems - Update to 1.47.0: * Add support for the orphan_file feature, which speeds up workloads that are deleting or truncating a large number files in parallel. This compat feature was first supported in the v5.15 Linux kernel. * The mke2fs program (via the mke2fs.conf file) now enables the metadata_csum_seed and orphan_file features by default. The metadata_csum_seed feature is an incompat feature which is first supported in the Linux kernel starting in the 4.4 kernel. * Mke2fs now supports the extended option "assume_storage_prezeroed" which causes mke2fs to skip zeroing the journal and inode tables and to mark the inode tables as zeroed. * Add support to tune2fs and e2label to set the label and UUID for a mounted file system using a ioctl, which is more reliable than modifying the superblock via writing to the block device. The kernel support for setting the label landed in v5.17, while the support for adding the UUID landed in v6.0. If the ioctls are not supported, tune2fs and e2label will fall back old strategy of directly modifying the superblock. * Allow tune2fs to disable the casefold feature after scanning all of the directories do not have the Casefold flag set. OBS-URL: https://build.opensuse.org/request/show/1063788 OBS-URL: https://build.opensuse.org/package/show/filesystems/e2fsprogs?expand=0&rev=154
2023-02-08 13:21:46 +01:00
--- e2fsprogs-1.47.0.orig/scrub/e2scrub_all.service.in
+++ e2fsprogs-1.47.0/scrub/e2scrub_all.service.in
Accepting request 925452 from home:jsegitz:branches:systemdhardening_protectclock - Drop ProtectClock hardening, can cause issues if other device acceess is needed OBS-URL: https://build.opensuse.org/request/show/925452 OBS-URL: https://build.opensuse.org/package/show/filesystems/e2fsprogs?expand=0&rev=145
2021-10-16 11:37:28 +02:00
@@ -6,6 +6,17 @@ ConditionCapability=CAP_SYS_RAWIO
Accepting request 918932 from home:jsegitz:branches:systemdhardening:filesystems Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/918932 OBS-URL: https://build.opensuse.org/package/show/filesystems/e2fsprogs?expand=0&rev=142
2021-09-15 11:02:50 +02:00
Documentation=man:e2scrub_all(8)
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=oneshot
Environment=SERVICE_MODE=1
ExecStart=@root_sbindir@/e2scrub_all
Reference in New Issue Copy Permalink