diff --git a/httpd.service b/httpd.service index b75e28c..c5b5e08 100644 --- a/httpd.service +++ b/httpd.service @@ -26,25 +26,8 @@ ExecReload=/usr/sbin/httpd $OPTIONS -k graceful # Send SIGWINCH for graceful stop KillSignal=SIGWINCH KillMode=mixed -DevicePolicy=closed -KeyringMode=private -LockPersonality=yes -MemoryDenyWriteExecute=yes -OOMPolicy=continue -PrivateDevices=yes PrivateTmp=true -ProtectClock=yes -ProtectControlGroups=yes -ProtectHome=read-only -ProtectHostname=yes -ProtectKernelLogs=yes -ProtectKernelModules=yes -ProtectKernelTunables=yes -ProtectSystem=yes -RestrictNamespaces=yes -RestrictRealtime=yes -RestrictSUIDSGID=yes -SystemCallArchitectures=native +OOMPolicy=continue [Install] WantedBy=multi-user.target diff --git a/httpd.spec b/httpd.spec index 43fa7dc..8a85347 100644 --- a/httpd.spec +++ b/httpd.spec @@ -889,10 +889,6 @@ exit $rv * Thu Mar 28 2024 Joe Orton - 2.4.58-8 - rebuild to fix changelog ordering -* Thu Mar 7 2024 Rahul Sundaram - 2.4.58-7 -- Update Systemd security settings as part of https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening -- updated httpd.service(5) (Joe Orton) - * Wed Jan 24 2024 Fedora Release Engineering - 2.4.58-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild diff --git a/httpd@.service b/httpd@.service index 8b20b90..84424fb 100644 --- a/httpd@.service +++ b/httpd@.service @@ -19,25 +19,8 @@ ExecReload=/usr/sbin/httpd $OPTIONS -k graceful -f conf/%i.conf # Send SIGWINCH for graceful stop KillSignal=SIGWINCH KillMode=mixed -DevicePolicy=closed -KeyringMode=private -LockPersonality=yes -MemoryDenyWriteExecute=yes -OOMPolicy=continue -PrivateDevices=yes PrivateTmp=true -ProtectClock=yes -ProtectControlGroups=yes -ProtectHome=read-only -ProtectHostname=yes -ProtectKernelLogs=yes -ProtectKernelModules=yes -ProtectKernelTunables=yes -ProtectSystem=yes -RestrictNamespaces=yes -RestrictRealtime=yes -RestrictSUIDSGID=yes -SystemCallArchitectures=native +OOMPolicy=continue [Install] WantedBy=multi-user.target