From f461772382f43446401f10ff05dd5df50641595a Mon Sep 17 00:00:00 2001 From: Vitaly Zaitsev Date: Mar 02 2020 14:36:20 +0000 Subject: Updated to version 1.4. --- diff --git a/.gitignore b/.gitignore index da646ac..77e2f76 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ /earlyoom-1.2.tar.gz /earlyoom-1.3.tar.gz /earlyoom-1.3.1.tar.gz +/earlyoom-1.4.tar.gz diff --git a/earlyoom-unit-hardening.patch b/earlyoom-unit-hardening.patch deleted file mode 100644 index 351927e..0000000 --- a/earlyoom-unit-hardening.patch +++ /dev/null @@ -1,32 +0,0 @@ -From f2b45e6a18a0624032d289318569ad57c24fd419 Mon Sep 17 00:00:00 2001 -From: Jakob Unterwurzacher -Date: Wed, 12 Feb 2020 22:19:49 +0100 -Subject: [PATCH] earlyoom.service: drop root privileges - -Run as a random unprivilege user instead of as root, -but add the capabilities CAP_KILL CAP_IPC_LOCK. - -Supersedes https://github.com/rfjakob/earlyoom/pull/158 ---- - earlyoom.service.in | 8 ++++++++ - 1 file changed, 8 insertions(+) - -diff --git a/earlyoom.service.in b/earlyoom.service.in -index 5f193f0..2df9330 100644 ---- a/earlyoom.service.in -+++ b/earlyoom.service.in -@@ -5,6 +5,14 @@ Documentation=man:earlyoom(1) https://github.com/rfjakob/earlyoom - [Service] - EnvironmentFile=-:SYSCONFDIR:/default/earlyoom - ExecStart=:TARGET:/earlyoom $EARLYOOM_ARGS -+# Run as an unprivileged user with random user id -+DynamicUser=true -+# Allow killing processes and calling mlockall() -+AmbientCapabilities=CAP_KILL CAP_IPC_LOCK -+# We don't need write access anywhere -+ProtectSystem=strict -+# We don't need /home at all, make it inaccessible -+ProtectHome=true - - [Install] - WantedBy=multi-user.target diff --git a/earlyoom.spec b/earlyoom.spec index df58e2f..791c8e6 100644 --- a/earlyoom.spec +++ b/earlyoom.spec @@ -1,5 +1,5 @@ Name: earlyoom -Version: 1.3.1 +Version: 1.4 Release: 1%{?dist} License: MIT @@ -7,9 +7,6 @@ URL: https://github.com/rfjakob/%{name} Summary: Early OOM Daemon for Linux Source0: %{url}/archive/v%{version}/%{name}-%{version}.tar.gz -# https://github.com/rfjakob/earlyoom/commit/f2b45e6a18a0624032d289318569ad57c24fd419 -Patch100: %{name}-unit-hardening.patch - %{?systemd_requires} BuildRequires: systemd BuildRequires: pandoc @@ -53,6 +50,9 @@ sed -e '/systemctl/d' -i Makefile %systemd_postun_with_restart %{name}.service %changelog +* Mon Mar 02 2020 Vitaly Zaitsev - 1.4-1 +- Updated to version 1.4. + * Fri Feb 28 2020 Vitaly Zaitsev - 1.3.1-1 - Updated to version 1.3.1. diff --git a/sources b/sources index 1ecf5fb..be57cce 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (earlyoom-1.3.1.tar.gz) = 6853321f59ee8cfe64f163fc1125cfec94322aa52add36b03bbfa0c0001b9ff8dcb7ee3429be663adab0956ea0c30cc9c616d357f7442df3dc65501b43a2797d +SHA512 (earlyoom-1.4.tar.gz) = 6f01f75004f498c782ae6cd4dc8b75b22278623430a53e1ce19b494e8add9b4c5d4d6b96c1a13e8dbe59895f51e49b2bc2a2235fd6caf2956e8a3beb04e08fd4