cookiez/pam-fprint-grosshack
1
0
Fork 0
mirror of https://gitlab.com/mishakmak/pam-fprint-grosshack.git synced 2026-04-09 04:13:33 +02:00
Code Issues Packages Projects Releases Wiki Activity

Revert "data: Add additional fprintd lockdown"

Browse Source 
The current lockdown rules prevent USB devices from being accessed and
cause threading to not work.
As such, revert them until it is clear on how/if we can apply these
measures. It is primarily not clear on how to prevent fork/clone as
fprintd does not need those.

This reverts commit 2fd86624e5.

See: #82
This commit is contained in:
Benjamin Berg
2020-11-06 10:22:32 +01:00
committed by Benjamin Berg
parent b2cae5cccf
commit e224913b80
1 changed files with 0 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
data/fprintd.service.in
View File

@ -15,8 +15,6 @@ ProtectControlGroups=true
StateDirectory=fprint StateDirectory=fprint
ProtectHome=true ProtectHome=true
PrivateTmp=true PrivateTmp=true
ProtectKernelLogs=yes
SystemCallFilter=@system-service
# Network # Network
PrivateNetwork=true PrivateNetwork=true
@ -33,8 +31,3 @@ RestrictRealtime=true
# Privilege escalation # Privilege escalation
NoNewPrivileges=true NoNewPrivileges=true
TasksMax=1
# Capabilities
CapabilityBoundingSet=
ProtectClock=yes