rpm/frr
SHA256
1
0
Fork 0
forked from pool/frr
Code Pull Requests Activity
234fd30855
frr/harden_frr.service.patch

43 lines
1.2 KiB
Diff
Raw Normal View History

Accepting request 937520 from home:jsegitz:branches:systemdhardening:network - Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400). OBS-URL: https://build.opensuse.org/request/show/937520 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=36
2021-12-09 10:26:15 +01:00
Index: frr-frr-8.1/tools/frr.service.in
Accepting request 919470 from home:jsegitz:branches:systemdhardening:network Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/919470 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=32
2021-09-27 20:40:19 +02:00
===================================================================
Accepting request 937520 from home:jsegitz:branches:systemdhardening:network - Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400). OBS-URL: https://build.opensuse.org/request/show/937520 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=36
2021-12-09 10:26:15 +01:00
--- frr-frr-8.1.orig/tools/frr.service.in
+++ frr-frr-8.1/tools/frr.service.in
@@ -7,6 +7,16 @@ Before=network.target
Accepting request 924307 from home:linnaea:branches:network - Update to version 8.0.1 * refreshed patch: - 0001-disable-zmq-test.patch - harden_frr.service.patch * LDP gained SNMP support * OSPFv3 gained VRF support * EVPN Multihoming is now fully supported * TI-LFA implemented in IS-IS and OSPS * New Segment Routing daemon * See: https://frrouting.org/release/8.0/ and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1 OBS-URL: https://build.opensuse.org/request/show/924307 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=33
2021-10-13 21:19:15 +02:00
OnFailure=heartbeat-failed@%n
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
Accepting request 937520 from home:jsegitz:branches:systemdhardening:network - Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400). OBS-URL: https://build.opensuse.org/request/show/937520 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=36
2021-12-09 10:26:15 +01:00
+ReadWritePaths=/etc/frr
Accepting request 924307 from home:linnaea:branches:network - Update to version 8.0.1 * refreshed patch: - 0001-disable-zmq-test.patch - harden_frr.service.patch * LDP gained SNMP support * OSPFv3 gained VRF support * EVPN Multihoming is now fully supported * TI-LFA implemented in IS-IS and OSPS * New Segment Routing daemon * See: https://frrouting.org/release/8.0/ and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1 OBS-URL: https://build.opensuse.org/request/show/924307 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=33
2021-10-13 21:19:15 +02:00
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Nice=-5
Type=forking
NotifyAccess=all
Accepting request 937520 from home:jsegitz:branches:systemdhardening:network - Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400). OBS-URL: https://build.opensuse.org/request/show/937520 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=36
2021-12-09 10:26:15 +01:00
Index: frr-frr-8.1/tools/frr@.service.in
Accepting request 924307 from home:linnaea:branches:network - Update to version 8.0.1 * refreshed patch: - 0001-disable-zmq-test.patch - harden_frr.service.patch * LDP gained SNMP support * OSPFv3 gained VRF support * EVPN Multihoming is now fully supported * TI-LFA implemented in IS-IS and OSPS * New Segment Routing daemon * See: https://frrouting.org/release/8.0/ and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1 OBS-URL: https://build.opensuse.org/request/show/924307 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=33
2021-10-13 21:19:15 +02:00
===================================================================
Accepting request 937520 from home:jsegitz:branches:systemdhardening:network - Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400). OBS-URL: https://build.opensuse.org/request/show/937520 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=36
2021-12-09 10:26:15 +01:00
--- frr-frr-8.1.orig/tools/frr@.service.in
+++ frr-frr-8.1/tools/frr@.service.in
@@ -7,6 +7,16 @@ Before=network.target
Accepting request 924307 from home:linnaea:branches:network - Update to version 8.0.1 * refreshed patch: - 0001-disable-zmq-test.patch - harden_frr.service.patch * LDP gained SNMP support * OSPFv3 gained VRF support * EVPN Multihoming is now fully supported * TI-LFA implemented in IS-IS and OSPS * New Segment Routing daemon * See: https://frrouting.org/release/8.0/ and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1 OBS-URL: https://build.opensuse.org/request/show/924307 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=33
2021-10-13 21:19:15 +02:00
OnFailure=heartbeat-failed@%n
Accepting request 919470 from home:jsegitz:branches:systemdhardening:network Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/919470 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=32
2021-09-27 20:40:19 +02:00
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
Accepting request 937520 from home:jsegitz:branches:systemdhardening:network - Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400). OBS-URL: https://build.opensuse.org/request/show/937520 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=36
2021-12-09 10:26:15 +01:00
+ReadWritePaths=/etc/frr
Accepting request 919470 from home:jsegitz:branches:systemdhardening:network Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/919470 OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=32
2021-09-27 20:40:19 +02:00
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Nice=-5
Type=forking
NotifyAccess=all
Copy Permalink