diff --git a/postfix.service b/postfix.service index 23df077..e2b43a6 100644 --- a/postfix.service +++ b/postfix.service @@ -7,6 +7,10 @@ Conflicts=sendmail.service exim.service Type=forking PIDFile=/var/spool/postfix/pid/master.pid EnvironmentFile=-/etc/sysconfig/network +PrivateTmp=true +CapabilityBoundingSet=~ CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_MODULE +ProtectSystem=true +PrivateDevices=true ExecStartPre=-/usr/libexec/postfix/aliasesdb ExecStartPre=-/usr/libexec/postfix/chroot-update ExecStart=/usr/sbin/postfix start diff --git a/postfix.spec b/postfix.spec index e7323d8..56b7e72 100644 --- a/postfix.spec +++ b/postfix.spec @@ -42,7 +42,7 @@ Name: postfix Summary: Postfix Mail Transport Agent Version: 3.1.1 -Release: 1%{?dist} +Release: 2%{?dist} Epoch: 2 Group: System Environment/Daemons URL: http://www.postfix.org @@ -732,6 +732,10 @@ rm -rf $RPM_BUILD_ROOT %endif %changelog +* Wed Jun 29 2016 Jaroslav Škarvada - 2:3.1.1-2 +- Hardened systemd unit file + Resolves: rhbz#1350941 + * Mon May 16 2016 Jaroslav Škarvada - 2:3.1.1-1 - New version Resolves: rhbz#1336245