diff --git a/.files b/.files index 487236f..d6bfbf7 100644 Binary files a/.files and b/.files differ diff --git a/.rev b/.rev index dac6803..83d8a07 100644 --- a/.rev +++ b/.rev @@ -113,4 +113,12 @@ 911254 + + 3ae6c1e9d73b218d51e69401dd1c9b63 + 4.5.1 + + RBrownFactory + + 997527 + diff --git a/2ping.changes b/2ping.changes index 8b48923..b13d742 100644 --- a/2ping.changes +++ b/2ping.changes @@ -1,4 +1,9 @@ ------------------------------------------------------------------- +Fri Oct 15 11:48:55 UTC 2021 - Johannes Segitz + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + +------------------------------------------------------------------- Tue Aug 10 09:28:47 UTC 2021 - Johannes Segitz - Added hardening to systemd service(s). Added patch(es): diff --git a/harden_2ping.service.patch b/harden_2ping.service.patch index c9e1c5c..85920f6 100644 --- a/harden_2ping.service.patch +++ b/harden_2ping.service.patch @@ -2,14 +2,13 @@ Index: 2ping-4.5.1/2ping.service =================================================================== --- 2ping-4.5.1.orig/2ping.service +++ 2ping-4.5.1/2ping.service -@@ -30,6 +30,11 @@ RestrictAddressFamilies=AF_NETLINK AF_IN +@@ -30,6 +30,10 @@ RestrictAddressFamilies=AF_NETLINK AF_IN RestrictNamespaces=yes RestrictRealtime=yes RestrictSUIDSGID=yes +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectHostname=true -+ProtectClock=true +# end of automatic additions User=nobody