File: systemd-hardening.patch

package info (click to toggle)
libosmo-sigtran 2.1.0-3
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 1,584 kB
  • sloc: ansic: 19,151; makefile: 301; sh: 151; python: 144; xml: 73
file content (18 lines) | stat: -rw-r--r-- 637 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
From: Nathan Doris <nate.doris@gmail.com>
Date: Tuesday, 13 August 2024
Description: systemd-hardening feature
Forwarded: no

Index: libosmo-sigtran-2.1.0/contrib/systemd/osmo-stp.service
===================================================================
--- libosmo-sigtran-2.1.0.orig/contrib/systemd/osmo-stp.service	2025-03-11 08:38:50.192308051 +0100
+++ libosmo-sigtran-2.1.0/contrib/systemd/osmo-stp.service	2025-03-11 08:38:50.188308053 +0100
@@ -13,6 +13,8 @@
 Group=osmocom
 ExecStart=/usr/bin/osmo-stp -c /etc/osmocom/osmo-stp.cfg
 RestartSec=2
+PrivateTmp=true
+ProtectHome=read-only
 
 [Install]
 WantedBy=multi-user.target