rpm/postfix
SHA256
1
0
Fork 0
forked from pool/postfix
Code Pull Requests Activity

Accepting request 926889 from home:jsegitz:branches:server:mail

Browse Source 
- Ensure service can write to /etc/postfix

OBS-URL: https://build.opensuse.org/request/show/926889
OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=428
This commit is contained in:
Michael Ströder 2021-10-22 09:07:48 +00:00 committed by Git OBS Bridge
parent 57bbfe9be1
commit 2731001218
3 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
harden_postfix.service.patch
View File

@ -2,13 +2,14 @@ Index: postfix-3.6.2/postfix-SUSE/postfix.service
===================================================================
--- postfix-3.6.2.orig/postfix-SUSE/postfix.service
+++ postfix-3.6.2/postfix-SUSE/postfix.service
@@ -19,6 +19,19 @@ After=amavis.service mysql.service cyrus
@@ -19,6 +19,20 @@ After=amavis.service mysql.service cyrus
Conflicts=sendmail.service exim.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ReadWritePaths=/etc/postfix
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true

5
postfix-bdb.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 22 08:46:19 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Ensure service can write to /etc/postfix
-------------------------------------------------------------------
Thu Oct 21 15:39:55 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

5
postfix.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 22 08:46:19 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
- Ensure service can write to /etc/postfix
-------------------------------------------------------------------
Thu Oct 21 15:39:55 UTC 2021 - Johannes Segitz <jsegitz@suse.com>