diff --git a/fluidsynth.changes b/fluidsynth.changes index 8a66f6d..5e5f693 100644 --- a/fluidsynth.changes +++ b/fluidsynth.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Oct 15 12:11:47 UTC 2021 - Johannes Segitz + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + ------------------------------------------------------------------- Tue Sep 14 09:59:43 UTC 2021 - Johannes Segitz diff --git a/fluidsynth.service b/fluidsynth.service index 20e44e9..cc59622 100644 --- a/fluidsynth.service +++ b/fluidsynth.service @@ -9,7 +9,6 @@ After=sound.target ProtectSystem=full ProtectHome=true ProtectHostname=true -ProtectClock=true ProtectKernelTunables=true ProtectKernelModules=true ProtectKernelLogs=true diff --git a/harden_fluidsynth.service.patch b/harden_fluidsynth.service.patch index 444e669..cb520d2 100644 --- a/harden_fluidsynth.service.patch +++ b/harden_fluidsynth.service.patch @@ -2,7 +2,7 @@ Index: fluidsynth-2.2.2/fluidsynth.service.in =================================================================== --- fluidsynth-2.2.2.orig/fluidsynth.service.in +++ fluidsynth-2.2.2/fluidsynth.service.in -@@ -4,6 +4,17 @@ Documentation=man:fluidsynth(1) +@@ -4,6 +4,16 @@ Documentation=man:fluidsynth(1) After=sound.target [Service] @@ -11,7 +11,6 @@ Index: fluidsynth-2.2.2/fluidsynth.service.in +ProtectSystem=full +ProtectHome=true +ProtectHostname=true -+ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true