/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to debian/mandos-client.postinst

  • Committer: Teddy Hogeborn
  • Date: 2017-08-20 14:14:14 UTC
  • mto: (237.7.594 trunk)
  • mto: This revision was merged to the branch mainline in revision 360.
  • Revision ID: teddy@recompile.se-20170820141414-m034xuebg7ccaeui
Add some more restrictions to the systemd service file.

* mandos.service ([Service]/ProtectKernelTunables): New; set to "yes".
  ([Service]/ProtectControlGroups): - '' -

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/mandos-client.postinst
57
57
        return 0
58
58
    fi
59
59
    mandos-keygen
 
60
    gpg-connect-agent KILLAGENT /bye || :
60
61
}
61
62
 
62
63
create_dh_params(){
90
91
        create_key "$@"
91
92
        create_dh_params "$@" || :
92
93
        update_initramfs "$@"
93
 
        if dpkg --compare-versions "$2" lt-nl "1.7.7-1"; then
 
94
        if dpkg --compare-versions "$2" lt-nl "1.7.10-1"; then
94
95
            PLUGINHELPERDIR=/usr/lib/$(dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null)/mandos/plugin-helpers
95
96
            if ! dpkg-statoverride --list "$PLUGINHELPERDIR" \
96
97
                 >/dev/null 2>&1; then