forked from pool/postfix
Dirk Mueller
a24981fe02
fix config.postfix 'hash' leftover with relay_recipients OBS-URL: https://build.opensuse.org/request/show/975425 OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=442
30 lines
952 B
Diff
30 lines
952 B
Diff
Index: postfix-SUSE/postfix.service
|
|
===================================================================
|
|
--- postfix-SUSE/postfix.service.orig
|
|
+++ postfix-SUSE/postfix.service
|
|
@@ -19,6 +19,24 @@ After=amavis.service mysql.service cyrus
|
|
Conflicts=sendmail.service exim.service
|
|
|
|
[Service]
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+
|
|
+# Needed write permissions for /etc/aliases.* or /etc/aliases.lmdb
|
|
+# https://bugzilla.opensuse.org/show_bug.cgi?id=1191988
|
|
+#ProtectSystem=full
|
|
+#ReadWritePaths=/etc/postfix
|
|
+
|
|
+ProtectHome=false
|
|
+PrivateDevices=true
|
|
+ProtectHostname=true
|
|
+ProtectClock=true
|
|
+ProtectKernelTunables=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+RestrictRealtime=true
|
|
+# end of automatic additions
|
|
Type=forking
|
|
PIDFile=/var/spool/postfix/pid/master.pid
|
|
ExecStartPre=-/bin/echo 'Starting mail service (Postfix)'
|