Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Backports:SLE-15-SP4:FactoryCandidates
memcached
harden_memcached.service.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File harden_memcached.service.patch of Package memcached
Index: memcached-1.6.9/scripts/memcached.service =================================================================== --- memcached-1.6.9.orig/scripts/memcached.service +++ memcached-1.6.9/scripts/memcached.service @@ -41,6 +41,13 @@ CapabilityBoundingSet=CAP_SETGID CAP_SET # Restricts the set of socket address families accessible to the processes # of this unit. Protects against vulnerabilities such as CVE-2016-8655 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectHome=true +ProtectHostname=true +ProtectClock=true +ProtectKernelLogs=true +# end of automatic additions # Some security features are not in the older versions of systemd used by
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
