SHA256
1
0
forked from pool/nut
nut/harden_nut-driver.service.patch
Antonio Teixeira 6bb3890ddb Accepting request 1123362 from home:adkorte:branches:hardware
- Update to version 2.8.1
  For more see NEWS.adoc and UPGRADING.adoc in /usr/share/doc/packages/nut
  (the list of changes is too long to list).
- Remove obsolete patch:
  * nut-Solaris-init-files.patch

OBS-URL: https://build.opensuse.org/request/show/1123362
OBS-URL: https://build.opensuse.org/package/show/hardware/nut?expand=0&rev=109
2023-11-19 19:26:20 +00:00

22 lines
832 B
Diff

diff -purN a/scripts/systemd/nut-driver@.service.in b/scripts/systemd/nut-driver@.service.in
--- a/scripts/systemd/nut-driver@.service.in 2023-10-07 16:06:44.000000000 +0200
+++ b/scripts/systemd/nut-driver@.service.in 2023-11-03 19:46:30.856267504 +0100
@@ -46,6 +46,17 @@ PartOf=nut-driver.target
# Finally note that "nut-driver-enumerator.service" should take care of this.
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Environment=NUT_IGNORE_NOWAIT=true
EnvironmentFile=-@CONFPATH@/nut.conf
SyslogIdentifier=%N