You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Michael Prokop 29cf8436b8 TT#76552 Harden ngcp-mediator service ... ngcp-mediator service state BEFORE this change: | $ systemd-analyze security ngcp-mediator | tail -1 | → Overall exposure level for ngcp-mediator.service: 9.5 UNSAFE 😨 ngcp-mediator service state AFTER this change: | $ sudo COLUMNS=142 systemd-analyze security ngcp-mediator | grep -v '✓' | NAME DESCRIPTION EXPOSURE | ✗ PrivateNetwork= Service has access to the host's network 0.5 | ✗ User=/DynamicUser= Service runs as root user 0.4 | ✗ RestrictAddressFamilies=~AF_(INET|INET6) Service may allocate Internet sockets 0.3 | ✗ RestrictAddressFamilies=~… Service may allocate exotic sockets 0.3 | ✗ DeviceAllow= Service has a device ACL with some special devices 0.1 | ✗ IPAddressDeny= Service defines IP address whitelits with only localhost entries 0.1 | ✗ RestrictAddressFamilies=~AF_PACKET Service may allocate packet sockets 0.2 | ✗ SystemCallFilter=~@privileged System call whitelist defined for service, and @privileged is included 0.2 | ✗ RestrictAddressFamilies=~AF_NETLINK Service may allocate netlink sockets 0.1 | ✗ RootDirectory=/RootImage= Service runs within the host's root directory 0.1 | SupplementaryGroups= Service runs as root, option does not matter | RemoveIPC= Service runs as root, option does not apply | ✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1 | | → Overall exposure level for ngcp-mediator.service: 2.0 OK 🙂 Change-Id: If33c303b9df465393f15c0b685d1aab54a465df6		5 years ago
..
source	TT#5420 Update packaging	9 years ago
.gitignore	TT#22072 Update packaging	9 years ago
changelog	Release new version 9.3.0.0+0~mr9.3.0.0	6 years ago
control	TT#61954 Set debhelper compat level in Build-Depends instead of debian/compat	7 years ago
copyright	TT#61954 Update copyright years	7 years ago
ngcp-mediator.conf	TT#49150 Namespace binary name with ngcp-	8 years ago
ngcp-mediator.install	TT#49150 Namespace binary name with ngcp-	8 years ago
ngcp-mediator.links	TT#26264 Add a manual alias for ngcp-mediator	9 years ago
ngcp-mediator.lintian-overrides	TT#49150 Namespace binary name with ngcp-	8 years ago
ngcp-mediator.maintscript	TT#26264 Remove obsolete init script	8 years ago
ngcp-mediator.postinst	TT#26264 Remove obsolete rc.d symlinks	8 years ago
ngcp-mediator.service	TT#76552 Harden ngcp-mediator service	5 years ago
rules	TT#26264 Remove obsolete init script	8 years ago