Fixed problem with service restrictions

This commit is contained in:
Dennis Schwerdel 2019-12-22 16:50:34 +01:00
parent 7edb649c32
commit f59f3ab5ab
5 changed files with 13 additions and 3 deletions

View File

@ -2,6 +2,10 @@
This project follows [semantic versioning](http://semver.org).
### v1.2.1 (2019-12-22)
- [fixed] Fixed a problem with service restrictions
### v1.2.0 (2019-12-20)
- [added] Added service restrictions to systemd

2
Cargo.lock generated
View File

@ -556,7 +556,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
[[package]]
name = "vpncloud"
version = "1.2.0"
version = "1.2.1"
dependencies = [
"cc 1.0.48 (registry+https://github.com/rust-lang/crates.io-index)",
"daemonize 0.4.1 (registry+https://github.com/rust-lang/crates.io-index)",

View File

@ -1,6 +1,6 @@
[package]
name = "vpncloud"
version = "1.2.0"
version = "1.2.1"
authors = ["Dennis Schwerdel <schwerdel@googlemail.com>"]
build = "build.rs"
license = "GPL-3.0"

View File

@ -1,3 +1,9 @@
vpncloud (1.2.1) stable; urgency=medium
* [fixed] Fixed a problem with service restrictions
-- Dennis Schwerdel <schwerdel@googlemail.com> Sun, 22 Dec 2019 16:47:38 +0100
vpncloud (1.2.0) stable; urgency=medium
* [added] Added service restrictions to systemd

View File

@ -14,7 +14,7 @@ LimitNPROC=10
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=strict
ReadWritePaths=/var/log/vpncloud-%i.log /var/log/vpncloud-%i.stats
ReadWritePaths=-/var/log/vpncloud-%i.log -/var/log/vpncloud-%i.stats
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT
DeviceAllow=/dev/null rw
DeviceAllow=/dev/net/tun rw