From 255e374254d82e671b1027e66e56aa1bf64a390d8354a793343d6f021b51bdfd Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Thu, 27 Apr 2023 08:34:45 +0000 Subject: [PATCH] Accepting request 1082992 from home:jsegitz:branches:Base:System - Don't use ProtectKernelTunables, can break some use cases (bsc#1210656) OBS-URL: https://build.opensuse.org/request/show/1082992 OBS-URL: https://build.opensuse.org/package/show/Base:System/ledmon?expand=0&rev=47 --- harden_ledmon.service.patch | 9 ++++----- ledmon.changes | 6 ++++++ 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/harden_ledmon.service.patch b/harden_ledmon.service.patch index 97470b6..eae35e5 100644 --- a/harden_ledmon.service.patch +++ b/harden_ledmon.service.patch @@ -1,8 +1,8 @@ -Index: ledmon-0.95/systemd/ledmon.service.in +Index: ledmon-0.96/systemd/ledmon.service.in =================================================================== ---- ledmon-0.95.orig/systemd/ledmon.service.in -+++ ledmon-0.95/systemd/ledmon.service.in -@@ -5,6 +5,17 @@ Description=Enclosure LED Utilities +--- ledmon-0.96.orig/systemd/ledmon.service.in ++++ ledmon-0.96/systemd/ledmon.service.in +@@ -5,6 +5,16 @@ Description=Enclosure LED Utilities WantedBy=multi-user.target [Service] @@ -11,7 +11,6 @@ Index: ledmon-0.95/systemd/ledmon.service.in +ProtectSystem=full +ProtectHome=true +ProtectHostname=true -+ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true diff --git a/ledmon.changes b/ledmon.changes index 89954ae..9efc869 100644 --- a/ledmon.changes +++ b/ledmon.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Apr 26 11:27:18 UTC 2023 - Johannes Segitz + +- Don't use ProtectKernelTunables, can break some use cases + (bsc#1210656) + ------------------------------------------------------------------- Tue Feb 28 02:07:16 UTC 2023 - Nicholas Yang