diff --git a/.files b/.files index fa60a12..597ad9d 100644 Binary files a/.files and b/.files differ diff --git a/.rev b/.rev index 4796c34..a763f3c 100644 --- a/.rev +++ b/.rev @@ -1050,4 +1050,14 @@ By now, it's required for sle-15, so synchronized the updated specfile and chang - Spec layout cleaning up for harden_accounts-daemon.service.patch. (forwarded request 910817 from yfjiang) 913679 + + ea991afe83a254c89750839ee0c02a0e + 0.6.55 + + dimstar_suse + - Update harden_accounts-daemon.service.patch: Do not proect home + directories: the accounts daemon is used to create home + directories upon user creation (boo#1189853). + 914414 + diff --git a/accountsservice.changes b/accountsservice.changes index 8a1ffe3..c694bb3 100644 --- a/accountsservice.changes +++ b/accountsservice.changes @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Thu Aug 26 15:07:51 UTC 2021 - Dominique Leuenberger + +- Update harden_accounts-daemon.service.patch: Do not proect home + directories: the accounts daemon is used to create home + directories upon user creation (boo#1189853). + +------------------------------------------------------------------- Mon Aug 9 09:36:20 UTC 2021 - Yifan Jiang - Spec layout cleaning up for harden_accounts-daemon.service.patch. diff --git a/harden_accounts-daemon.service.patch b/harden_accounts-daemon.service.patch index 00af038..2e8d8c3 100644 --- a/harden_accounts-daemon.service.patch +++ b/harden_accounts-daemon.service.patch @@ -2,13 +2,12 @@ Index: accountsservice-0.6.55/data/accounts-daemon.service.in =================================================================== --- accountsservice-0.6.55.orig/data/accounts-daemon.service.in +++ accountsservice-0.6.55/data/accounts-daemon.service.in -@@ -8,6 +8,16 @@ After=nss-user-lookup.target +@@ -8,6 +8,15 @@ After=nss-user-lookup.target Wants=nss-user-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -+ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true