|
 |
95af3a |
From 01ff44aeedce5dba803ea7ae761fa06615b6e0af Mon Sep 17 00:00:00 2001
|
|
|
95af3a |
From: Honggang Li <honli@redhat.com>
|
|
|
95af3a |
Date: Wed, 27 Dec 2017 11:44:33 +0800
|
|
|
95af3a |
Subject: [PATCH] srp_daemon: Remove unsupported systemd configurations
|
|
|
95af3a |
|
|
|
95af3a |
Note: This is rhel-7.5 specific patch.
|
|
|
95af3a |
|
|
|
95af3a |
+--------------------------+---------------+
|
|
|
95af3a |
| lvalue | systemd |
|
|
|
95af3a |
+--------------------------+---------------+
|
|
|
95af3a |
| MemoryDenyWriteExecute | 231 |
|
|
|
95af3a |
| ProtectControlGroups | 232 |
|
|
|
95af3a |
| ProtectKernelModules | 232 |
|
|
|
95af3a |
| RestrictRealtime | 231 |
|
|
|
95af3a |
+--------------------------+---------------+
|
|
|
95af3a |
|
|
|
95af3a |
RHEL-7.5 includes systemd-219-51 which does not support
|
|
|
95af3a |
those configuration yet, so remove them.
|
|
|
95af3a |
|
|
|
95af3a |
Signed-off-by: Honggang Li <honli@redhat.com>
|
|
|
95af3a |
---
|
|
|
95af3a |
srp_daemon/srp_daemon.service.in | 3 ---
|
|
|
95af3a |
srp_daemon/srp_daemon_port@.service.in | 4 ----
|
|
|
95af3a |
2 files changed, 7 deletions(-)
|
|
|
95af3a |
|
|
|
95af3a |
diff --git a/srp_daemon/srp_daemon.service.in b/srp_daemon/srp_daemon.service.in
|
|
|
95af3a |
index 93e44425..b8bea643 100644
|
|
|
95af3a |
--- a/srp_daemon/srp_daemon.service.in
|
|
|
95af3a |
+++ b/srp_daemon/srp_daemon.service.in
|
|
|
95af3a |
@@ -10,11 +10,8 @@ Before=remote-fs-pre.target
|
|
|
95af3a |
Type=oneshot
|
|
|
95af3a |
RemainAfterExit=yes
|
|
|
95af3a |
ExecStart=@CMAKE_INSTALL_FULL_LIBEXECDIR@/srp_daemon/start_on_all_ports
|
|
|
95af3a |
-MemoryDenyWriteExecute=yes
|
|
|
95af3a |
PrivateTmp=yes
|
|
|
95af3a |
ProtectHome=yes
|
|
|
95af3a |
-ProtectKernelModules=yes
|
|
|
95af3a |
-RestrictRealtime=yes
|
|
|
95af3a |
|
|
|
95af3a |
[Install]
|
|
|
95af3a |
WantedBy=remote-fs-pre.target
|
|
|
95af3a |
diff --git a/srp_daemon/srp_daemon_port@.service.in b/srp_daemon/srp_daemon_port@.service.in
|
|
|
95af3a |
index 3d5a11e8..7516e8a2 100644
|
|
|
95af3a |
--- a/srp_daemon/srp_daemon_port@.service.in
|
|
|
95af3a |
+++ b/srp_daemon/srp_daemon_port@.service.in
|
|
|
95af3a |
@@ -24,14 +24,10 @@ BindsTo=srp_daemon.service
|
|
|
95af3a |
[Service]
|
|
|
95af3a |
Type=simple
|
|
|
95af3a |
ExecStart=@CMAKE_INSTALL_FULL_SBINDIR@/srp_daemon --systemd -e -c -n -j %I -R 60
|
|
|
95af3a |
-MemoryDenyWriteExecute=yes
|
|
|
95af3a |
PrivateNetwork=yes
|
|
|
95af3a |
PrivateTmp=yes
|
|
|
95af3a |
-ProtectControlGroups=yes
|
|
|
95af3a |
ProtectHome=yes
|
|
|
95af3a |
-ProtectKernelModules=yes
|
|
|
95af3a |
ProtectSystem=full
|
|
|
95af3a |
-RestrictRealtime=yes
|
|
|
95af3a |
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io
|
|
|
95af3a |
|
|
|
95af3a |
[Install]
|
|
|
95af3a |
--
|
|
|
95af3a |
2.15.GIT
|
|
|
95af3a |
|