forked from pool/nqptp
- Add backport-b5321a88d21b854aaa461dc0f6c226d650309b91.patch Remove setcap call. - Add backport-050a8c2de9f3e1f4859abf9b36d2f18afd4c34d7.patch Set capability in the systemd unit instead. - Add disable-user-group-generation.patch Disable user/group generation in the Makefile. Let systemd-sysusers handle this instead. - Update to 1.2.4 - Further changes are introduced to make the communication path between NQPTP and Shairport Sync resistant to outside interference. These changes have necessitated changing the SMI interface. The SMI interface is now at version 10, and Shairport Sync must also be updated to be compatible with it. - Update to 1.2.3 - Fix CVE-2023-43771: nqptp: NULL pointer dereference caused by invalid control port message (boo#1213060) OBS-URL: https://build.opensuse.org/package/show/network:time/nqptp?expand=0&rev=4
24 lines
718 B
Diff
24 lines
718 B
Diff
From 050a8c2de9f3e1f4859abf9b36d2f18afd4c34d7 Mon Sep 17 00:00:00 2001
|
|
From: Hs_Yeah <bYeahq@gmail.com>
|
|
Date: Tue, 19 Sep 2023 03:12:47 +0800
|
|
Subject: [PATCH] Added AmbientCapabilities to nqptp.service.in
|
|
|
|
Added AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
so that the systemd service can be used without the capability set on the built nqptp binary.
|
|
---
|
|
nqptp.service.in | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
diff --git a/nqptp.service.in b/nqptp.service.in
|
|
index 6f1eb0c..53e6a2e 100644
|
|
--- a/nqptp.service.in
|
|
+++ b/nqptp.service.in
|
|
@@ -8,6 +8,7 @@ Before=shairport-sync.service
|
|
ExecStart=@prefix@/bin/nqptp
|
|
User=nqptp
|
|
Group=nqptp
|
|
+AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|