Re: [RFC/PATCH] Add hardening settings to uuidd.service

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Nov 12, 2018 at 10:10:31PM +0100, Andreas Henriksson wrote:
> diff --git a/misc-utils/uuidd.service.in b/misc-utils/uuidd.service.in
> index 45f1f7334..dd38b645c 100644
> --- a/misc-utils/uuidd.service.in
> +++ b/misc-utils/uuidd.service.in
> @@ -17,8 +17,7 @@ ProtectKernelModules=yes
>  ProtectControlGroups=yes
>  RestrictAddressFamilies=AF_UNIX
>  MemoryDenyWriteExecute=yes
> -SystemCallFilter=@default @file-system @basic-io @system-service @signal @io-eve
> -nt @network-io
> +SystemCallFilter=@default @file-system @basic-io @system-service @signal @io-event @network-io


Not sure, maybe I have miss some another your patch or you forgot to
send any patch, but we have no Protect* and Restrict* setting in the
uuidd.service.in yet. The current upstream is:

 https://github.com/karelzak/util-linux/blob/master/misc-utils/uuidd.service.in

:-)

-- 
 Karel Zak  <kzak@xxxxxxxxxx>
 http://karelzak.blogspot.com



[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux