usbguard/usbguard-disable-console-log.patch
alakatos ade588d7e4 Store permanent rules even if RuleFile is not set but RuleFolder is
Disable logging to console, logging to syslog is still enabled
Resolves: rhbz#2155910
2023-01-06 14:09:09 +01:00

13 lines
628 B
Diff

diff -up usbguard-1.0.0/usbguard.service.in.orig usbguard-1.0.0/usbguard.service.in
--- usbguard-1.0.0/usbguard.service.in.orig 2023-01-05 13:49:33.830500992 +0100
+++ usbguard-1.0.0/usbguard.service.in 2023-01-05 13:49:41.455507265 +0100
@@ -8,7 +8,7 @@ OOMScoreAdjust=-1000
AmbientCapabilities=
CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_AUDIT_WRITE
DevicePolicy=closed
-ExecStart=%sbindir%/usbguard-daemon -f -s -c %sysconfdir%/usbguard/usbguard-daemon.conf
+ExecStart=%sbindir%/usbguard-daemon -f -s -K -c %sysconfdir%/usbguard/usbguard-daemon.conf
IPAddressDeny=any
LockPersonality=yes
MemoryDenyWriteExecute=yes