rpm/neard
SHA256
1
0
Fork 0
forked from pool/neard
Code Pull Requests Activity

Accepting request 925506 from hardware

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/925506
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/neard?expand=0&rev=11
This commit is contained in:
Dominique Leuenberger 2021-10-15 21:04:31 +00:00 committed by Git OBS Bridge
commit 496eaa9785
3 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
harden_neard.service.patch
View File

@ -2,7 +2,7 @@ Index: neard-0.16/src/neard.service.in
=================================================================== ===================================================================
--- neard-0.16.orig/src/neard.service.in --- neard-0.16.orig/src/neard.service.in
+++ neard-0.16/src/neard.service.in +++ neard-0.16/src/neard.service.in
@@ -3,6 +3,18 @@ Description=neard service @@ -3,6 +3,17 @@ Description=neard service
Documentation=man:neard(8) Documentation=man:neard(8)
[Service] [Service]
@ -11,7 +11,6 @@ Index: neard-0.16/src/neard.service.in
+ProtectSystem=full +ProtectSystem=full
+ProtectHome=true +ProtectHome=true
+ProtectHostname=true +ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true +ProtectKernelTunables=true
+ProtectKernelModules=true +ProtectKernelModules=true
+ProtectKernelLogs=true +ProtectKernelLogs=true

5
neard.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 15 12:12:44 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Oct 11 07:29:41 UTC 2021 - Johannes Segitz <jsegitz@suse.com> Mon Oct 11 07:29:41 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

1
neard.service
View File

@ -8,7 +8,6 @@ Documentation=man:neard(8)
ProtectSystem=full ProtectSystem=full
ProtectHome=true ProtectHome=true
ProtectHostname=true ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true ProtectKernelTunables=true
ProtectKernelModules=true ProtectKernelModules=true
ProtectKernelLogs=true ProtectKernelLogs=true