diff --git a/iodine.changes b/iodine.changes index 52d00aa..9611a2a 100644 --- a/iodine.changes +++ b/iodine.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Mon Oct 23 12:43:37 UTC 2023 - malcolmlewis@opensuse.org + +- Comment out ProtectDevices in hardening, (boo#1216238). Modified: + * iodine.service. + * iodined.service. + ------------------------------------------------------------------- Sun Sep 3 14:31:36 UTC 2023 - malcolmlewis@opensuse.org diff --git a/iodine.service b/iodine.service index 4f49176..68a6b16 100644 --- a/iodine.service +++ b/iodine.service @@ -12,7 +12,7 @@ After=network.target syslog.target # https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort ProtectSystem=full ProtectHome=true -PrivateDevices=true +# PrivateDevices=true see boo#1216238 ProtectHostname=true # ProtectClock=true see boo#1206835 ProtectKernelTunables=true diff --git a/iodined.service b/iodined.service index 5f4fde2..907fc6b 100644 --- a/iodined.service +++ b/iodined.service @@ -12,7 +12,7 @@ After=network.target syslog.target # https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort ProtectSystem=full ProtectHome=true -PrivateDevices=true +# PrivateDevices=true see boo#1216238 ProtectHostname=true # ProtectClock=true see boo#1206835 ProtectKernelTunables=true