rpm/neard
SHA256
1
0
Fork 0
forked from pool/neard
Code Pull Requests Activity

Accepting request 925506 from hardware

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/925506
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/neard?expand=0&rev=11
This commit is contained in:
Dominique Leuenberger 2021-10-15 21:04:31 +00:00 committed by Git OBS Bridge
commit 496eaa9785
3 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
harden_neard.service.patch
View File

@ -2,7 +2,7 @@ Index: neard-0.16/src/neard.service.in
===================================================================
--- neard-0.16.orig/src/neard.service.in
+++ neard-0.16/src/neard.service.in
@@ -3,6 +3,18 @@ Description=neard service
@@ -3,6 +3,17 @@ Description=neard service
Documentation=man:neard(8)
[Service]
@ -11,7 +11,6 @@ Index: neard-0.16/src/neard.service.in
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true

5
neard.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 15 12:12:44 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
-------------------------------------------------------------------
Mon Oct 11 07:29:41 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

1
neard.service
View File

@ -8,7 +8,6 @@ Documentation=man:neard(8)
ProtectSystem=full
ProtectHome=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true