SHA256
1
0
forked from pool/nqptp
Files
nqptp/backport-050a8c2de9f3e1f4859abf9b36d2f18afd4c34d7.patch
Martin Pluskal 8f54c26d19 - Backports from 1.2.5-dev
- Add backport-b5321a88d21b854aaa461dc0f6c226d650309b91.patch
    Remove setcap call.
  - Add backport-050a8c2de9f3e1f4859abf9b36d2f18afd4c34d7.patch
    Set capability in the systemd unit instead.
- Add disable-user-group-generation.patch
  Disable user/group generation in the Makefile.
  Let systemd-sysusers handle this instead.
- Update to 1.2.4
  - Further changes are introduced to make the communication path between NQPTP
    and Shairport Sync resistant to outside interference. These changes have
    necessitated changing the SMI interface. The SMI interface is now at
    version 10, and Shairport Sync must also be updated to be compatible with
    it.
- Update to 1.2.3
  - Fix CVE-2023-43771: nqptp: NULL pointer dereference caused by invalid
    control port message (boo#1213060)

OBS-URL: https://build.opensuse.org/package/show/network:time/nqptp?expand=0&rev=4
2024-09-05 09:10:04 +00:00

24 lines
718 B
Diff

From 050a8c2de9f3e1f4859abf9b36d2f18afd4c34d7 Mon Sep 17 00:00:00 2001
From: Hs_Yeah <bYeahq@gmail.com>
Date: Tue, 19 Sep 2023 03:12:47 +0800
Subject: [PATCH] Added AmbientCapabilities to nqptp.service.in
Added AmbientCapabilities=CAP_NET_BIND_SERVICE
so that the systemd service can be used without the capability set on the built nqptp binary.
---
nqptp.service.in | 1 +
1 file changed, 1 insertion(+)
diff --git a/nqptp.service.in b/nqptp.service.in
index 6f1eb0c..53e6a2e 100644
--- a/nqptp.service.in
+++ b/nqptp.service.in
@@ -8,6 +8,7 @@ Before=shairport-sync.service
ExecStart=@prefix@/bin/nqptp
User=nqptp
Group=nqptp
+AmbientCapabilities=CAP_NET_BIND_SERVICE
[Install]
WantedBy=multi-user.target