SHA256
1
0
forked from pool/spacenavd
spacenavd/harden_spacenavd.service.patch
Herbert Graeber ddfe768b54 - Version 1.3
* Support for dominant axis mode. Dominant axis toggle can be bound as
    a button action.
  * Fixed device detection for some serial Spaceballs which were misdetected
    due to spurious data arriving before the "@reset".
  * Normalized default axis mapping/sign for CadMan USB and Spaceball 5000 USB.
  * Linux: stop using the evdev time field, which was dropped in 32bit linux
    for year 2038 compatibility.
  * Protocol: added missing set/get requests for the repeat interval.
  * Updated device blacklists to ignore 3Dconnexion keyboards/mice.
  * Build improvements and fixes for various platforms.
- Add libXext as a build requires

OBS-URL: https://build.opensuse.org/package/show/hardware/spacenavd?expand=0&rev=31
2024-08-24 11:17:44 +00:00

25 lines
792 B
Diff

diff -ur spacenavd-1.0.orig/contrib/systemd/spacenavd.service spacenavd-1.0/contrib/systemd/spacenavd.service
--- spacenavd-1.0.orig/contrib/systemd/spacenavd.service 2022-04-25 16:03:28.338795433 +0200
+++ spacenavd-1.0/contrib/systemd/spacenavd.service 2022-04-25 15:59:36.042588021 +0200
@@ -3,9 +3,20 @@
After=syslog.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
PIDFile=/run/spnavd.pid
ExecStart=/usr/sbin/spacenavd
StandardError=syslog
[Install]