Commit Graph

6 Commits

Author SHA1 Message Date
Arnaud Ferraris
162fcf6fca d/eg25-manager.service: be less restrictive
Additional security options in kernel config make it more picky, 
removing problematic directives (`DeviceAllow` and `ProtectClock`) from 
the service file helps getting things straight.

Other options aren't recognized by our systemd version 
(`ProtectKernelModules`, `ProtectProc`, `ProtectDevices` and 
`ProtectKernelLog`), so we can just as well remove those.
2021-09-01 00:26:21 +02:00
undef
67195a8e58 d/service: Use systemd to sandbox eg25-manager
With eg25-manager directly interfacing with the untrusted modem and
potentially (MR !15) including libcurl for HTTP, sandboxing the daemon
significantly reduces the any post-exploit attack surface.
2021-07-26 23:24:08 +00:00
Arnaud Ferraris
c77c58df49 d/eg25-manager.service: remove deprecated -g option 2021-02-20 22:26:13 +01:00
Arnaud Ferraris
70db05fc62 d/eg25-manager.service: enable GNSS management 2021-01-14 00:09:17 +01:00
Arnaud Ferraris
397a16a9e3 d/service: restart daemon on failure 2020-12-11 10:49:02 +01:00
Arnaud Ferraris
7c04c1998f Initial Debian packaging 2020-12-10 15:19:25 +01:00