diff --git a/harden_ledmon.service.patch b/harden_ledmon.service.patch index 97470b6..eae35e5 100644 --- a/harden_ledmon.service.patch +++ b/harden_ledmon.service.patch @@ -1,8 +1,8 @@ -Index: ledmon-0.95/systemd/ledmon.service.in +Index: ledmon-0.96/systemd/ledmon.service.in =================================================================== ---- ledmon-0.95.orig/systemd/ledmon.service.in -+++ ledmon-0.95/systemd/ledmon.service.in -@@ -5,6 +5,17 @@ Description=Enclosure LED Utilities +--- ledmon-0.96.orig/systemd/ledmon.service.in ++++ ledmon-0.96/systemd/ledmon.service.in +@@ -5,6 +5,16 @@ Description=Enclosure LED Utilities WantedBy=multi-user.target [Service] @@ -11,7 +11,6 @@ Index: ledmon-0.95/systemd/ledmon.service.in +ProtectSystem=full +ProtectHome=true +ProtectHostname=true -+ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true diff --git a/ledmon.changes b/ledmon.changes index 89954ae..9efc869 100644 --- a/ledmon.changes +++ b/ledmon.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Apr 26 11:27:18 UTC 2023 - Johannes Segitz + +- Don't use ProtectKernelTunables, can break some use cases + (bsc#1210656) + ------------------------------------------------------------------- Tue Feb 28 02:07:16 UTC 2023 - Nicholas Yang