rpm/frr
SHA256
1
0
Fork 0
forked from pool/frr
Code Pull Requests Activity

Accepting request 925455 from home:jsegitz:branches:systemdhardening_protectclock

Browse Source 
- Drop ProtectClock hardening, can cause issues if other device acceess is needed

OBS-URL: https://build.opensuse.org/request/show/925455
OBS-URL: https://build.opensuse.org/package/show/network/frr?expand=0&rev=34
This commit is contained in:
Martin Hauke 2021-10-15 14:54:13 +00:00 committed by Git OBS Bridge
parent 2f62ce9820
commit dc346218a1
2 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
frr.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 15 12:11:50 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
-------------------------------------------------------------------
Sat Oct 9 01:58:08 UTC 2021 - Linnaea Lavia <linnaea@lavia.moe>

6
harden_frr.service.patch
View File

@ -2,7 +2,7 @@ Index: frr-frr-8.0.1/tools/frr.service.in
===================================================================
--- frr-frr-8.0.1.orig/tools/frr.service.in
+++ frr-frr-8.0.1/tools/frr.service.in
@@ -7,6 +7,16 @@ Before=network.target
@@ -7,6 +7,15 @@ Before=network.target
OnFailure=heartbeat-failed@%n
[Service]
@ -10,7 +10,6 @@ Index: frr-frr-8.0.1/tools/frr.service.in
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectClock=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
@ -23,7 +22,7 @@ Index: frr-frr-8.0.1/tools/frr@.service.in
===================================================================
--- frr-frr-8.0.1.orig/tools/frr@.service.in
+++ frr-frr-8.0.1/tools/frr@.service.in
@@ -7,6 +7,16 @@ Before=network.target
@@ -7,6 +7,15 @@ Before=network.target
OnFailure=heartbeat-failed@%n
[Service]
@ -31,7 +30,6 @@ Index: frr-frr-8.0.1/tools/frr@.service.in
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectClock=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true