|
 |
673c78 |
From 3ceddbb1238e13a51efbe23119c885568e820e69 Mon Sep 17 00:00:00 2001
|
|
|
673c78 |
From: Karel Zak <kzak@redhat.com>
|
|
|
673c78 |
Date: Thu, 2 Jun 2022 16:55:49 +0200
|
|
|
673c78 |
Subject: uuidd: allow AF_INET in systemd service
|
|
|
673c78 |
|
|
|
673c78 |
libuuid uses
|
|
|
673c78 |
|
|
|
673c78 |
socket(AF_INET, SOCK_DGRAM, IPPROTO_IP)
|
|
|
673c78 |
|
|
|
673c78 |
to get MAC address for time based UUIDs, but there is
|
|
|
673c78 |
|
|
|
673c78 |
RestrictAddressFamilies=AF_UNIX
|
|
|
673c78 |
|
|
|
673c78 |
in uuidd service file ...
|
|
|
673c78 |
|
|
|
673c78 |
Fixes: https://github.com/util-linux/util-linux/issues/1704
|
|
|
673c78 |
Upstream: http://github.com/util-linux/util-linux/commit/304b4dc4936b115ca33af5325c3b04d0997c1353
|
|
|
673c78 |
Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=2092943
|
|
|
673c78 |
Signed-off-by: Karel Zak <kzak@redhat.com>
|
|
|
673c78 |
---
|
|
|
673c78 |
misc-utils/uuidd.service.in | 1 -
|
|
|
673c78 |
1 file changed, 1 deletion(-)
|
|
|
673c78 |
|
|
|
673c78 |
diff --git a/misc-utils/uuidd.service.in b/misc-utils/uuidd.service.in
|
|
|
673c78 |
index e64ca59b5..64580287f 100644
|
|
|
673c78 |
--- a/misc-utils/uuidd.service.in
|
|
|
673c78 |
+++ b/misc-utils/uuidd.service.in
|
|
|
673c78 |
@@ -16,7 +16,6 @@ PrivateUsers=yes
|
|
|
673c78 |
ProtectKernelTunables=yes
|
|
|
673c78 |
ProtectKernelModules=yes
|
|
|
673c78 |
ProtectControlGroups=yes
|
|
|
673c78 |
-RestrictAddressFamilies=AF_UNIX
|
|
|
673c78 |
MemoryDenyWriteExecute=yes
|
|
|
673c78 |
ReadWritePaths=/var/lib/libuuid/
|
|
|
673c78 |
SystemCallFilter=@default @file-system @basic-io @system-service @signal @io-event @network-io
|
|
|
673c78 |
--
|
|
|
673c78 |
2.36.1
|
|
|
673c78 |
|