diff --git a/harden_neard.service.patch b/harden_neard.service.patch index 98931f3..c1bcea8 100644 --- a/harden_neard.service.patch +++ b/harden_neard.service.patch @@ -2,7 +2,7 @@ Index: neard-0.16/src/neard.service.in =================================================================== --- neard-0.16.orig/src/neard.service.in +++ neard-0.16/src/neard.service.in -@@ -3,6 +3,18 @@ Description=neard service +@@ -3,6 +3,17 @@ Description=neard service Documentation=man:neard(8) [Service] @@ -11,7 +11,6 @@ Index: neard-0.16/src/neard.service.in +ProtectSystem=full +ProtectHome=true +ProtectHostname=true -+ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true diff --git a/neard.changes b/neard.changes index 7cc6d7c..6dc0b0c 100644 --- a/neard.changes +++ b/neard.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Oct 15 12:12:44 UTC 2021 - Johannes Segitz + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + ------------------------------------------------------------------- Mon Oct 11 07:29:41 UTC 2021 - Johannes Segitz diff --git a/neard.service b/neard.service index 848e1f5..ea49794 100644 --- a/neard.service +++ b/neard.service @@ -8,7 +8,6 @@ Documentation=man:neard(8) ProtectSystem=full ProtectHome=true ProtectHostname=true -ProtectClock=true ProtectKernelTunables=true ProtectKernelModules=true ProtectKernelLogs=true