]> www.infradead.org Git - users/sagi/nvme-cli.git/commit
projects / users / sagi / nvme-cli.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 75656d1) | patch
nvmf-connect: systemd hardening effort
authorDaniel Wagner <dwagner@suse.de>
Tue, 4 Apr 2023 12:06:03 +0000 (14:06 +0200)
committerDaniel Wagner <wagi@monom.org>
Tue, 23 Apr 2024 12:31:19 +0000 (14:31 +0200)
commit52ad531402e16b1b8a7400853d10f66bb0359d68
tree2fc49edaa09b6f3f392646bfc0a6fde2157859d1tree
parent75656d1cc2abf8690ca8c9b0ebe8e921a0c89557commit | diff
nvmf-connect: systemd hardening effort

Apply the recommended hardening settings as recommended by openSUSE
and Fedor project. A few of the hardening option have to turned of
because nvme-cli needs write access to sysfs and /dev/nvme devices.

Links: https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
Links: https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening
Signed-off-by: Daniel Wagner <dwagner@suse.de>
nvmf-autoconnect/systemd/nvmefc-boot-connections.service.in diff | blob | history
nvmf-autoconnect/systemd/nvmf-autoconnect.service.in diff | blob | history
nvmf-autoconnect/systemd/nvmf-connect-nbft.service.in diff | blob | history
nvmf-autoconnect/systemd/nvmf-connect@.service.in diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.