From 4b12af8ee2389027fcd617fca35a4fb7a0858c1ad3d5218860e449ddefd08119 Mon Sep 17 00:00:00 2001
From: Al Cho <acho@suse.com>
Date: Fri, 15 Oct 2021 15:03:03 +0000
Subject: [PATCH] Accepting request 925473 from
 home:jsegitz:branches:systemdhardening_protectclock

- Drop ProtectClock hardening, can cause issues if other device acceess is needed

OBS-URL: https://build.opensuse.org/request/show/925473
OBS-URL: https://build.opensuse.org/package/show/hardware/neard?expand=0&rev=26
---
 harden_neard.service.patch | 3 +--
 neard.changes              | 5 +++++
 neard.service              | 1 -
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/harden_neard.service.patch b/harden_neard.service.patch
index 98931f3..c1bcea8 100644
--- a/harden_neard.service.patch
+++ b/harden_neard.service.patch
@@ -2,7 +2,7 @@ Index: neard-0.16/src/neard.service.in
 ===================================================================
 --- neard-0.16.orig/src/neard.service.in
 +++ neard-0.16/src/neard.service.in
-@@ -3,6 +3,18 @@ Description=neard service
+@@ -3,6 +3,17 @@ Description=neard service
  Documentation=man:neard(8)
  
  [Service]
@@ -11,7 +11,6 @@ Index: neard-0.16/src/neard.service.in
 +ProtectSystem=full
 +ProtectHome=true
 +ProtectHostname=true
-+ProtectClock=true
 +ProtectKernelTunables=true
 +ProtectKernelModules=true
 +ProtectKernelLogs=true
diff --git a/neard.changes b/neard.changes
index 7cc6d7c..6dc0b0c 100644
--- a/neard.changes
+++ b/neard.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Oct 15 12:12:44 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
+
+- Drop ProtectClock hardening, can cause issues if other device acceess is needed
+
 -------------------------------------------------------------------
 Mon Oct 11 07:29:41 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
 
diff --git a/neard.service b/neard.service
index 848e1f5..ea49794 100644
--- a/neard.service
+++ b/neard.service
@@ -8,7 +8,6 @@ Documentation=man:neard(8)
 ProtectSystem=full
 ProtectHome=true
 ProtectHostname=true
-ProtectClock=true
 ProtectKernelTunables=true
 ProtectKernelModules=true
 ProtectKernelLogs=true