1
0
shairport-sync/harden_shairport-sync.service.patch

22 lines
828 B
Diff
Raw Normal View History

diff -Nur shairport-sync-4.1/scripts/shairport-sync.service.in shairport-sync-4.1-new/scripts/shairport-sync.service.in
--- shairport-sync-4.1/scripts/shairport-sync.service.in 2022-10-28 23:31:18.000000000 +0800
+++ shairport-sync-4.1-new/scripts/shairport-sync.service.in 2022-11-13 22:26:15.785234171 +0800
@@ -5,6 +5,17 @@
After=network.target network-online.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
ExecStart=@prefix@/bin/shairport-sync --log-to-syslog
User=shairport-sync
Group=shairport-sync