forked from pool/shairport-sync
35a1060f6a
- Removed: drop-user-config.patch This is now configurable in the build system. - Update version to 4.3.4 * https://github.com/mikebrady/shairport-sync/releases/tag/4.3.4 * ALSA: better support for HDMI ports * Enabled termination of a disconnected session in AirPlay 2 operation after a timeout -- it had been disabled by default. * Fixed a bug that prevented Shairport Sync from terminating cleanly when a fatal error occurred while directly accessing the alsa output device. * Fixed a bug that prevented Shairport Sync from recovering cleanly if a player disconnected without warning. * Avoided using TCP_KEEPINTVL and TCP_KEEPCNT if they are not defined. * Fixed a race condition with the metadata queues. - Update version to 4.3.3 * https://github.com/mikebrady/shairport-sync/releases/tag/4.3.3 * The man entry for Shairport Sync has moved from Section 7 (Miscellaneous information) to where it should be: Section 1 (General commands (tools and utilities)). * Bug fix: Use pthread_rwlock_wrlock instead of pthread_rdlock_wrlock when tearing down a connection. * Add support for the mbedtls3 library. * If a network interface is specified in the configuration file, limit addresses used for PTP to that network interface only. * Make Shairport Sync terminate if the configuration file exists but can not be opened. * Look for DACP-ID and Active-Remote in the GET /info request, where it sometimes appears in an AirPlay 2 session originating from an Intel Mac. * Do not print the password in debug logs. - Add missing runtime dependency: avahi (boo#1213521) OBS-URL: https://build.opensuse.org/package/show/multimedia:apps/shairport-sync?expand=0&rev=41
43 lines
1.4 KiB
Diff
43 lines
1.4 KiB
Diff
diff --git a/scripts/shairport-sync.service-avahi.in b/scripts/shairport-sync.service-avahi.in
|
|
index 4a874c54..6bc80c1e 100644
|
|
--- a/scripts/shairport-sync.service-avahi.in
|
|
+++ b/scripts/shairport-sync.service-avahi.in
|
|
@@ -7,6 +7,16 @@ Wants=network-online.target
|
|
After=network.target network-online.target
|
|
|
|
[Service]
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectSystem=full
|
|
+ProtectHome=true
|
|
+ProtectHostname=true
|
|
+ProtectKernelTunables=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+# end of automatic additions
|
|
ExecStart=@prefix@/bin/shairport-sync --log-to-syslog
|
|
User=shairport-sync
|
|
Group=shairport-sync
|
|
diff --git a/scripts/shairport-sync.service.in b/scripts/shairport-sync.service.in
|
|
index 18df3f35..791fd89f 100644
|
|
--- a/scripts/shairport-sync.service.in
|
|
+++ b/scripts/shairport-sync.service.in
|
|
@@ -5,6 +5,16 @@ Wants=network-online.target
|
|
After=network.target network-online.target
|
|
|
|
[Service]
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectSystem=full
|
|
+ProtectHome=true
|
|
+ProtectHostname=true
|
|
+ProtectKernelTunables=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+# end of automatic additions
|
|
ExecStart=@prefix@/bin/shairport-sync --log-to-syslog
|
|
User=shairport-sync
|
|
Group=shairport-sync
|