Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion build/agent/PKGBUILD
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ source=(
"service-discover-legacy.service"
)
sha256sums=(
'24d801a607705c6134d0ed4efd08f3badab46d15c669d6238f5dc046b0be374b'
'3c26a0a04ebec4047a80915c988cddf9a356ed2da71e19b1ae59b905c60a5d0d'
'e0e17bae0bfb978dd52718a03079eaf30c2bf5dba080ca98c2964eb42e02bf14'
)

Expand Down
8 changes: 6 additions & 2 deletions build/agent/service-discover.service
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,12 @@ TimeoutStopSec=120s

# Hardening
PrivateTmp=yes
ProtectSystem=strict
ReadWritePaths=/var/lib/service-discover /etc/zextras/service-discover /run/carbonio /tmp
#ProtectSystem=strict
#ReadWritePaths=/var/lib/service-discover /etc/zextras/service-discover /run/carbonio /tmp
ProtectSystem=yes
ReadOnlyPaths=/usr
ReadOnlyPaths=/boot
ReadOnlyPaths=/efi
PrivateDevices=yes
ProtectHome=yes
ProtectKernelModules=yes
Expand Down
2 changes: 1 addition & 1 deletion build/server/PKGBUILD
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ source=(
"service-discover-legacy.service"
)
sha256sums=(
'b419dbd9787fe0512ca2b9fb6225444d5bb5e28418a434a10f11571836d597ef'
'3777ea6ca6c77656a92666bd4eeca63df87c67f4b29d3b4dc8abc3bc32b9cc2a'
'5780163ac614276da1c812580686eb8adfdbfe9eebe62397d6a354ca461db1a9'
)

Expand Down
8 changes: 6 additions & 2 deletions build/server/service-discover.service
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,12 @@ TimeoutStopSec=120s

# Hardening
PrivateTmp=yes
ProtectSystem=strict
ReadWritePaths=/var/lib/service-discover /etc/zextras/service-discover /run/carbonio /tmp
#ProtectSystem=strict
#ReadWritePaths=/var/lib/service-discover /etc/zextras/service-discover /run/carbonio /tmp
ProtectSystem=yes
ReadOnlyPaths=/usr
ReadOnlyPaths=/boot
ReadOnlyPaths=/efi
PrivateDevices=yes
ProtectHome=yes
ProtectKernelModules=yes
Expand Down
2 changes: 1 addition & 1 deletion go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ require (
github.com/docker/go-units v0.5.0
github.com/go-ldap/ldap/v3 v3.4.13
github.com/hashicorp/consul/api/v2 v2.0.0
github.com/moby/moby/api v1.54.2
github.com/moby/moby/api v1.55.0
github.com/pkg/errors v0.9.1
github.com/stretchr/testify v1.11.1
github.com/testcontainers/testcontainers-go v0.42.0
Expand Down
4 changes: 2 additions & 2 deletions go.sum
Original file line number Diff line number Diff line change
Expand Up @@ -231,8 +231,8 @@ github.com/moby/docker-image-spec v1.3.1 h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3N
github.com/moby/docker-image-spec v1.3.1/go.mod h1:eKmb5VW8vQEh/BAr2yvVNvuiJuY6UIocYsFu/DxxRpo=
github.com/moby/go-archive v0.2.0 h1:zg5QDUM2mi0JIM9fdQZWC7U8+2ZfixfTYoHL7rWUcP8=
github.com/moby/go-archive v0.2.0/go.mod h1:mNeivT14o8xU+5q1YnNrkQVpK+dnNe/K6fHqnTg4qPU=
github.com/moby/moby/api v1.54.2 h1:wiat9QAhnDQjA7wk1kh/TqHz2I1uUA7M7t9SAl/JNXg=
github.com/moby/moby/api v1.54.2/go.mod h1:+RQ6wluLwtYaTd1WnPLykIDPekkuyD/ROWQClE83pzs=
github.com/moby/moby/api v1.55.0 h1:2/sexvQyqIWS8pRSCFddBfpW2qE7vR7FCL+vN8pxwMc=
github.com/moby/moby/api v1.55.0/go.mod h1:+RQ6wluLwtYaTd1WnPLykIDPekkuyD/ROWQClE83pzs=
github.com/moby/moby/client v0.4.0 h1:S+2XegzHQrrvTCvF6s5HFzcrywWQmuVnhOXe2kiWjIw=
github.com/moby/moby/client v0.4.0/go.mod h1:QWPbvWchQbxBNdaLSpoKpCdf5E+WxFAgNHogCWDoa7g=
github.com/moby/patternmatcher v0.6.1 h1:qlhtafmr6kgMIJjKJMDmMWq7WLkKIo23hsrpR3x084U=
Expand Down