From 4cb6e18af6372af3c44e274a2d5dc0e806af80a1defc1dfdc2d8b70d54a2ed53 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Mon, 24 Sep 2012 20:51:37 +0000 Subject: [PATCH] Accepting request 135723 from home:elvigia:branches:security - Tight up systemd service file, this daemon does not need network and can use PrivateNetwork=yes OBS-URL: https://build.opensuse.org/request/show/135723 OBS-URL: https://build.opensuse.org/package/show/security/haveged?expand=0&rev=63 --- haveged.changes | 6 ++++++ haveged.service | 3 ++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/haveged.changes b/haveged.changes index 1c6256b..1de721a 100644 --- a/haveged.changes +++ b/haveged.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Mon Sep 24 19:48:16 UTC 2012 - crrodriguez@opensuse.org + +- Tight up systemd service file, this daemon does not + need network and can use PrivateNetwork=yes + ------------------------------------------------------------------- Mon Aug 13 13:15:15 UTC 2012 - mvyskocil@suse.cz diff --git a/haveged.service b/haveged.service index c2f66fb..44cb87d 100644 --- a/haveged.service +++ b/haveged.service @@ -5,6 +5,7 @@ Description=Haveged Entropy Gathering Daemon Type=simple ExecStart=/usr/sbin/haveged -w 1024 -v 0 -F CapabilityBoundingSet=CAP_SYS_ADMIN - +PrivateNetwork=yes +PrivateTmp=yes [Install] WantedBy=multi-user.target