rpm/lirc
SHA256
1
0
Fork 0
forked from pool/lirc
Code Pull Requests Activity

Accepting request 1084411 from home:jsegitz:branches:vdr

Browse Source 
- Remove ProtectClock hardening. This causes more pain then it
  helps (bsc#1200577)

OBS-URL: https://build.opensuse.org/request/show/1084411
OBS-URL: https://build.opensuse.org/package/show/vdr/lirc?expand=0&rev=116
This commit is contained in:
Hans-Peter Jansen 2023-05-22 09:34:46 +00:00 committed by Git OBS Bridge
parent 046a9acdd1
commit 3717a3047b
6 changed files with 15 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
harden_irexec.service.patch
View File

@ -2,14 +2,13 @@ Index: lirc-0.10.1/systemd/irexec.service
===================================================================
--- lirc-0.10.1.orig/systemd/irexec.service
+++ lirc-0.10.1/systemd/irexec.service
@@ -5,6 +5,16 @@ Documentation=http://lirc.org/html/confi
@@ -5,6 +5,15 @@ Documentation=http://lirc.org/html/confi
Description=Handle events from IR remotes decoded by lircd(8)
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true

3
harden_lircd-uinput.service.patch
View File

@ -2,14 +2,13 @@ Index: lirc-0.10.1/systemd/lircd-uinput.service
===================================================================
--- lirc-0.10.1.orig/systemd/lircd-uinput.service
+++ lirc-0.10.1/systemd/lircd-uinput.service
@@ -5,6 +5,16 @@ Documentation=http://lirc.org/html/confi
@@ -5,6 +5,15 @@ Documentation=http://lirc.org/html/confi
Description=Forward LIRC button presses as uinput events
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true

12
harden_lircd.service.patch
View File

@ -1,22 +1,20 @@
--- lirc-0.10.1.orig/systemd/lircd.service 2021-11-13 20:42:43.204519438 +0100
+++ lirc-0.10.1/systemd/lircd.service 2021-11-13 20:47:54.182189779 +0100
@@ -6,6 +6,20 @@ Wants=lircd-setup.service
Index: lirc-0.10.1/systemd/lircd.service
===================================================================
--- lirc-0.10.1.orig/systemd/lircd.service
+++ lirc-0.10.1/systemd/lircd.service
@@ -6,6 +6,16 @@ Wants=lircd-setup.service
After=network.target lircd-setup.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
+#
+# ProtectClock=true from above blocks all device accesses, allow input device access again
+DeviceAllow=char-input
+#
Type=simple
ExecStart=/usr/sbin/lircd --nodaemon

3
harden_lircmd.service.patch
View File

@ -2,14 +2,13 @@ Index: lirc-0.10.1/systemd/lircmd.service
===================================================================
--- lirc-0.10.1.orig/systemd/lircmd.service
+++ lirc-0.10.1/systemd/lircmd.service
@@ -5,6 +5,16 @@ Documentation=http://lirc.org/html/confi
@@ -5,6 +5,15 @@ Documentation=http://lirc.org/html/confi
Description=Convert IR remotes button presses to mouse movements and clicks
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true

6
lirc.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed May 3 14:13:16 UTC 2023 - Johannes Segitz <jsegitz@suse.com>
- Remove ProtectClock hardening. This causes more pain then it
helps (bsc#1200577)
-------------------------------------------------------------------
Sun Jul 24 17:36:52 UTC 2022 - Andreas Schwab <schwab@suse.de>

2
lirc.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package lirc
#
# Copyright (c) 2022 SUSE LLC
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed