rpm/fluidsynth
SHA256
1
0
Fork 0
forked from pool/fluidsynth
Code Pull Requests Activity

Accepting request 925514 from multimedia:libs

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/925514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fluidsynth?expand=0&rev=62
This commit is contained in:
Dominique Leuenberger
2021-10-19 21:03:28 +00:00
committed by Git OBS Bridge
parent a80b41457d d4fe34c420
commit 96d9ebe85d
3 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
fluidsynth.changes
View File

@@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 15 12:11:47 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Sep 14 09:59:43 UTC 2021 - Johannes Segitz <jsegitz@suse.com> Tue Sep 14 09:59:43 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

1
fluidsynth.service
View File

@@ -9,7 +9,6 @@ After=sound.target
ProtectSystem=full ProtectSystem=full
ProtectHome=true ProtectHome=true
ProtectHostname=true ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true ProtectKernelTunables=true
ProtectKernelModules=true ProtectKernelModules=true
ProtectKernelLogs=true ProtectKernelLogs=true

3
harden_fluidsynth.service.patch
View File

@@ -2,7 +2,7 @@ Index: fluidsynth-2.2.2/fluidsynth.service.in
=================================================================== ===================================================================
--- fluidsynth-2.2.2.orig/fluidsynth.service.in --- fluidsynth-2.2.2.orig/fluidsynth.service.in
+++ fluidsynth-2.2.2/fluidsynth.service.in +++ fluidsynth-2.2.2/fluidsynth.service.in
@@ -4,6 +4,17 @@ Documentation=man:fluidsynth(1) @@ -4,6 +4,16 @@ Documentation=man:fluidsynth(1)
After=sound.target After=sound.target
[Service] [Service]
@@ -11,7 +11,6 @@ Index: fluidsynth-2.2.2/fluidsynth.service.in
+ProtectSystem=full +ProtectSystem=full
+ProtectHome=true +ProtectHome=true
+ProtectHostname=true +ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true +ProtectKernelTunables=true
+ProtectKernelModules=true +ProtectKernelModules=true
+ProtectKernelLogs=true +ProtectKernelLogs=true