You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Michael Prokop 35edfb92e6 TT#76552 Harden ngcp-panel service ... ngcp-panel service state BEFORE this change: | $ sudo systemd-analyze security ngcp-panel | tail -1 | → Overall exposure level for ngcp-panel.service: 9.2 UNSAFE 😨 ngcp-panel service state AFTER this change: | $ sudo SYSTEMD_COLORS=0 PAGER= COLUMNS=100 unbuffer systemd-analyze security ngcp-panel | grep -v '✓' | NAME DESCRIPTION EXPOSURE | ✗ PrivateNetwork= Service has access to the host's network 0.5 | ✗ RestrictAddressFamilies=~AF_(INET|INET6) Service may allocate Internet sockets 0.3 | ✗ DeviceAllow= Service has a device ACL with some special … 0.1 | ✗ IPAddressDeny= Service does not define an IP address allow… 0.2 | ✗ PrivateUsers= Service has access to other users 0.2 | ✗ SystemCallFilter=~@privileged System call allow list defined for service,… 0.2 | ✗ SystemCallFilter=~@resources System call allow list defined for service,… 0.2 | ✗ RootDirectory=/RootImage= Service runs within the host's root directo… 0.1 | ✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1 | | → Overall exposure level for ngcp-panel.service: 1.5 OK 🙂 As of systemd v247.3-7. Change-Id: Id1218abdbe8e9ef27285b4aa4d25972b7646da11		3 years ago
..
source	TT#130659 Remove 'svg-edit-2.6' JS code (necessary for Opera Presto only)	4 years ago
.gitignore	TT#124273 Update packaging for bullseye	4 years ago
changelog	Release new version 10.5.0.0+0~mr10.5.0.0	3 years ago
control	TT#124273 Update packaging for bullseye	4 years ago
copyright	TT#124273 Update packaging for bullseye	4 years ago
ngcp-api-testframework.install	TT#124273 Update packaging for bullseye	4 years ago
ngcp-panel-tools.install	TT#53701 Install into debian/tmp and select what to pick from there	6 years ago
ngcp-panel-tools.manpages	TT#33911 Perform 'wrap-and-sort -sat'	7 years ago
ngcp-panel-tools.postinst	TT#44809 Create the _ngcp-api group	7 years ago
ngcp-panel.install	TT#124273 Update packaging for bullseye	4 years ago
ngcp-panel.lintian-overrides	TT#34302 Remove /etc/{default,init.d}/ngcp-panel	7 years ago
ngcp-panel.maintscript	TT#34302 Remove /etc/{default,init.d}/ngcp-panel	7 years ago
ngcp-panel.postinst	TT#26264 Remove obsolete rc.d symlinks	7 years ago
ngcp-panel.service	TT#76552 Harden ngcp-panel service	3 years ago
ngcp-panel.tmpfiles	TT#124273 Update packaging for bullseye	4 years ago
rules	TT#53701 Install into debian/tmp and select what to pick from there	6 years ago