usbguard/disable-console-logging.patch
Cropi 547cc9791a RHEL 10.2 ERRATUM
Rebase to 1.1.4
selinux: comply with with the "Unify bin and sbin" change
Resolves: RHEL-113206
Restore permissions of the log directory
Resolves: RHEL-92260
2025-11-07 11:16:44 +01:00

13 lines
648 B
Diff

diff -up usbguard-1.1.4/usbguard.service.in.orig usbguard-1.1.4/usbguard.service.in
--- usbguard-1.1.4/usbguard.service.in.orig 2025-11-04 09:30:06.066901646 +0100
+++ usbguard-1.1.4/usbguard.service.in 2025-11-04 09:30:08.179271961 +0100
@@ -8,7 +8,7 @@ OOMScoreAdjust=-1000
AmbientCapabilities=
CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_AUDIT_WRITE CAP_DAC_READ_SEARCH
DevicePolicy=closed
-ExecStart=%sbindir%/usbguard-daemon -f -s -c %sysconfdir%/usbguard/usbguard-daemon.conf
+ExecStart=%sbindir%/usbguard-daemon -f -s -K -c %sysconfdir%/usbguard/usbguard-daemon.conf
IPAddressDeny=any
LockPersonality=yes
MemoryDenyWriteExecute=yes