diff --git a/radicale.service b/radicale.service index 8c9d3ed..6759ef4 100644 --- a/radicale.service +++ b/radicale.service @@ -14,6 +14,9 @@ PIDFile=/var/run/radicale/radicale.pid ExecStart=/usr/bin/radicale --daemon --pid=/var/run/radicale/radicale.pid PrivateTmp=true PrivateDevices=true +CapabilityBoundingSet= +ProtectSystem=full +ProtectHome=true Restart=always [Install] diff --git a/radicale.spec b/radicale.spec index 1b5846c..cd0e462 100644 --- a/radicale.spec +++ b/radicale.spec @@ -3,7 +3,7 @@ Name: radicale Version: 1.1.1 -Release: 6%{?dist} +Release: 7%{?dist} Summary: A simple CalDAV (calendar) and CardDAV (contact) server License: GPLv3+ URL: http://radicale.org @@ -252,6 +252,9 @@ fi %config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}-python2.conf %changelog +* Fri Jul 01 2016 Juan Orti Alcaine - 1.1.1-7 +- Additional systemd hardening + * Fri Jun 24 2016 Juan Orti Alcaine - 1.1.1-6 - Correctly label the files