From c39efd20134587905fd2f8b214f640db51ffce7b Mon Sep 17 00:00:00 2001 From: nyyu Date: Fri, 6 Jan 2023 20:10:01 +0100 Subject: [PATCH] nexus: protect full error ro on cleanup manifest docker --- nexus-oss/.SRCINFO | 2 +- nexus-oss/PKGBUILD | 2 +- nexus-oss/nexus-oss.service | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/nexus-oss/.SRCINFO b/nexus-oss/.SRCINFO index 4804fc3..1ec22b5 100644 --- a/nexus-oss/.SRCINFO +++ b/nexus-oss/.SRCINFO @@ -21,7 +21,7 @@ pkgbase = nexus-oss sha256sums = 2124ce46c9453e016dd2410a2b5edfa415e2df200cc209baa839e4df7576c1ad sha256sums = b33fbb8769ac73fe339ea2875a240f308fbd584519f533fba25cf6136eac2dd0 sha256sums = dcdef5614db12f38b3da0b9de1b52fb7fa402af6621a825981c6168a34a6ad9b - sha256sums = bb6d16579712ebb15df948ac395b9095955c12fec9160dd871254836a82c4062 + sha256sums = f74f500f93767afae47fffe3d2300628435cb2469a89e53c58f62fa60c730e8e sha256sums = 29567e274ffacb06e03580d94685b04aeb7197cd84a14108a347ad5307931be6 sha256sums = 939994095f0c5de005a1e36a295bea791a70dadfa32af23b400cbd87be57af9c sha256sums = 176c02ba4299ad818eed75cdaeb42a2d9ffa7332fc74ff30b7c37965e7095df4 diff --git a/nexus-oss/PKGBUILD b/nexus-oss/PKGBUILD index 17ac79b..d02cd00 100644 --- a/nexus-oss/PKGBUILD +++ b/nexus-oss/PKGBUILD @@ -26,7 +26,7 @@ source=("https://download.sonatype.com/nexus/3/nexus-$_version-$_patch-unix.tar. sha256sums=('2124ce46c9453e016dd2410a2b5edfa415e2df200cc209baa839e4df7576c1ad' 'b33fbb8769ac73fe339ea2875a240f308fbd584519f533fba25cf6136eac2dd0' 'dcdef5614db12f38b3da0b9de1b52fb7fa402af6621a825981c6168a34a6ad9b' - 'bb6d16579712ebb15df948ac395b9095955c12fec9160dd871254836a82c4062' + 'f74f500f93767afae47fffe3d2300628435cb2469a89e53c58f62fa60c730e8e' '29567e274ffacb06e03580d94685b04aeb7197cd84a14108a347ad5307931be6' '939994095f0c5de005a1e36a295bea791a70dadfa32af23b400cbd87be57af9c' '176c02ba4299ad818eed75cdaeb42a2d9ffa7332fc74ff30b7c37965e7095df4' diff --git a/nexus-oss/nexus-oss.service b/nexus-oss/nexus-oss.service index 6180cdf..11fe92f 100644 --- a/nexus-oss/nexus-oss.service +++ b/nexus-oss/nexus-oss.service @@ -30,7 +30,7 @@ ProtectKernelLogs=true ProtectKernelModules=true ProtectKernelTunables=true ProtectProc=invisible -ProtectSystem=strict +ProtectSystem=full RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX RestrictNamespaces=true RestrictRealtime=true