1
0
shairport-sync/harden_shairport-sync.service.patch
Hillwood Yang 42c8791128 Accepting request 1045498 from home:hillwood:branches:multimedia:apps
- Update version to 4.1
  * AirPlay 2 support
  * Improved libao backend for better compatibility with HomeBrew installations
  * Improved MQTT and D-Bus facilities
  * Metadata improvements
  * Automatically-generated Docker images

OBS-URL: https://build.opensuse.org/request/show/1045498
OBS-URL: https://build.opensuse.org/package/show/multimedia:apps/shairport-sync?expand=0&rev=25
2022-12-27 13:27:41 +00:00

22 lines
828 B
Diff

diff -Nur shairport-sync-4.1/scripts/shairport-sync.service.in shairport-sync-4.1-new/scripts/shairport-sync.service.in
--- shairport-sync-4.1/scripts/shairport-sync.service.in 2022-10-28 23:31:18.000000000 +0800
+++ shairport-sync-4.1-new/scripts/shairport-sync.service.in 2022-11-13 22:26:15.785234171 +0800
@@ -5,6 +5,17 @@
After=network.target network-online.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
ExecStart=@prefix@/bin/shairport-sync --log-to-syslog
User=shairport-sync
Group=shairport-sync