You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Michael Prokop fa565ef32c TT#110904 TT#76552 Fix systemd hardening for carrier environments ... In carrier environments we have foreign DB hosts configured in /etc/ngcp-mediator/ngcp-mediator.conf, therefore we can't easily apply IP address filtering. JFTR, new and current systemd hardening state for ngcp-mediator: | $ sudo COLUMNS=142 systemd-analyze security ngcp-mediator | grep -v '✓' | NAME DESCRIPTION EXPOSURE | ✗ PrivateNetwork= Service has access to the host's … 0.5 | ✗ User=/DynamicUser= Service runs as root user 0.4 | ✗ RestrictAddressFamilies=~AF_(INET… Service may allocate Internet soc… 0.3 | ✗ RestrictAddressFamilies=~… Service may allocate exotic socke… 0.3 | ✗ DeviceAllow= Service has a device ACL with som… 0.1 | ✗ IPAddressDeny= Service does not define an IP add… 0.2 | ✗ RestrictAddressFamilies=~AF_PACKET Service may allocate packet socke… 0.2 | ✗ SystemCallFilter=~@privileged System call whitelist defined for… 0.2 | ✗ RestrictAddressFamilies=~AF_NETLI… Service may allocate netlink sock… 0.1 | ✗ RootDirectory=/RootImage= Service runs within the host's ro… 0.1 | SupplementaryGroups= Service runs as root, option does… | RemoveIPC= Service runs as root, option does… | ✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1 | | → Overall exposure level for ngcp-mediator.service: 2.1 OK 🙂 Change-Id: I0e7c474eddd5d4d4c77b9bda157448294ed0a5c4		6 years ago
..
source	…
.gitignore	TT#22072 Update packaging	9 years ago
changelog	Release new version 9.3.0.0+0~mr9.3.0.0	6 years ago
control	TT#61954 Set debhelper compat level in Build-Depends instead of debian/compat	7 years ago
copyright	TT#61954 Update copyright years	7 years ago
ngcp-mediator.conf	TT#49150 Namespace binary name with ngcp-	8 years ago
ngcp-mediator.install	TT#49150 Namespace binary name with ngcp-	8 years ago
ngcp-mediator.links	TT#26264 Add a manual alias for ngcp-mediator	9 years ago
ngcp-mediator.lintian-overrides	TT#49150 Namespace binary name with ngcp-	8 years ago
ngcp-mediator.maintscript	TT#26264 Remove obsolete init script	8 years ago
ngcp-mediator.postinst	TT#26264 Remove obsolete rc.d symlinks	8 years ago
ngcp-mediator.service	TT#110904 TT#76552 Fix systemd hardening for carrier environments	6 years ago
rules	TT#26264 Remove obsolete init script	8 years ago