commit 0fcfaa5af9aa7529ba357a7d49fe7cf6a2a72323
Author: Juan Orti Alcaine <j.orti.alcaine@xxxxxxxxx>
Date: Mon May 12 11:24:54 2014 +0200
Service unit files hardening
amavisd-clean-quarantine.service | 4 ++++
amavisd-clean-tmp.service | 4 ++++
amavisd-new.spec | 5 ++++-
amavisd-snmp.service | 1 +
4 files changed, 13 insertions(+), 1 deletions(-)
---
diff --git a/amavisd-clean-quarantine.service b/amavisd-clean-quarantine.service
index 62c01cd..2bb8b3f 100644
--- a/amavisd-clean-quarantine.service
+++ b/amavisd-clean-quarantine.service
@@ -5,4 +5,8 @@ Description=Clean amavisd quarantine folder
Type=oneshot
User=amavis
Group=amavis
+PrivateTmp=true
+PrivateDevices=true
+PrivateNetwork=true
+NoNewPrivileges=true
ExecStart=/usr/sbin/tmpwatch -d 720 /var/spool/amavisd/quarantine
diff --git a/amavisd-clean-tmp.service b/amavisd-clean-tmp.service
index ff5073f..70fcffc 100644
--- a/amavisd-clean-tmp.service
+++ b/amavisd-clean-tmp.service
@@ -5,4 +5,8 @@ Description=Clean amavisd tmp folder
Type=oneshot
User=amavis
Group=amavis
+PrivateTmp=true
+PrivateDevices=true
+PrivateNetwork=true
+NoNewPrivileges=true
ExecStart=/usr/sbin/tmpwatch 24 /var/spool/amavisd/tmp
diff --git a/amavisd-new.spec b/amavisd-new.spec
index c5ae3cf..b1a0a5a 100644
--- a/amavisd-new.spec
+++ b/amavisd-new.spec
@@ -3,7 +3,7 @@
Summary: Email filter with virus scanner and spamassassin support
Name: amavisd-new
Version: 2.9.0
-Release: 1%{?prerelease:.%{prerelease}}%{?dist}
+Release: 2%{?prerelease:.%{prerelease}}%{?dist}
# LDAP schema is GFDL, some helpers are BSD, core is GPLv2+
License: GPLv2+ and BSD and GFDL
Group: Applications/System
@@ -231,6 +231,9 @@ systemctl start amavisd-clean-quarantine.timer >/dev/null 2>&1 || :
%{_sbindir}/amavisd-snmp-subagent
%changelog
+* Mon May 12 2014 Juan Orti Alcaine <jorti@xxxxxxxxxxxxxxxxx> 2.9.0-2
+- Service unit files hardening
+
* Sun May 11 2014 Juan Orti Alcaine <jorti@xxxxxxxxxxxxxxxxx> 2.9.0-1
- Update to version 2.9.0
- Rework amavisd-conf.patch
diff --git a/amavisd-snmp.service b/amavisd-snmp.service
index 955b88c..94b3537 100644
--- a/amavisd-snmp.service
+++ b/amavisd-snmp.service
@@ -10,6 +10,7 @@ PIDFile=/var/run/amavisd/amavisd-snmp-subagent.pid
ExecStart=/usr/sbin/amavisd-snmp-subagent -D /var/spool/amavisd/db -P /var/run/amavisd/amavisd-snmp-subagent.pid
Restart=on-failure
PrivateTmp=true
+PrivateDevices=true
NoNewPrivileges=true
[Install]
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/perl-devel
