fdo-mirrors/NetworkManager
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git synced 2025-12-26 11:10:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
NetworkManager/data
History
Lubomir Rintel 2dd3466a78 data/NetworkManager.service: restrict the unit some more 
This adds some low-hanging food to improve our score with "systemd-analyze
security" by one point:

Before:
  → Overall exposure level for NetworkManager.service: 7.8 EXPOSED 🙁

After:
  → Overall exposure level for NetworkManager.service: 6.8 MEDIUM 😐

Nothing particularly impactful here: we still got DAC_OVERRIDE, we still
can insert loadable modules (as opposed to relying on autoload) and
read user home directories. But there's a slight chance this may save
our butts one day, who knows.

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2062
2025-05-19 16:07:17 +02:00
..
84-nm-drivers.rules udev: also react to "move" (and "change") udev actions in our rules 2021-08-16 19:22:32 +02:00
85-nm-unmanaged.rules udev: manage veths named eth* 2022-02-23 09:35:15 +01:00
90-nm-thunderbolt.rules udev: also react to "move" (and "change") udev actions in our rules 2021-08-16 19:22:32 +02:00
meson.build systemd: add initrd-specific services 2025-02-26 09:31:05 +00:00
NetworkManager-config-initrd.service.in systemd: add initrd-specific services 2025-02-26 09:31:05 +00:00
NetworkManager-dispatcher.service.in dispatcher: show man page in .service file 2023-11-03 07:19:08 +00:00
NetworkManager-initrd.service.in systemd: add initrd-specific services 2025-02-26 09:31:05 +00:00
NetworkManager-ovs.conf device: add support for OpenVSwitch devices 2017-10-30 21:46:55 +01:00
NetworkManager-wait-online-initrd.service.in systemd: add initrd-specific services 2025-02-26 09:31:05 +00:00
NetworkManager-wait-online.service.in doc: update Documentation reference in NetworkManager-wait-online.service 2023-06-07 16:48:30 +02:00
NetworkManager.service.in data/NetworkManager.service: restrict the unit some more 2025-05-19 16:07:17 +02:00
nm-priv-helper.service.in Rephrase certain expressions to avoid the usage of the term "allows to" 2025-03-27 09:44:07 +01:00
nm-shared.xml firewalld: allow access to SSH in "nm-shared" firewalld zone 2020-06-15 16:49:14 +02:00
org.freedesktop.NetworkManager.policy.in.in build: stop relying on intltool for i18n 2022-06-27 13:40:09 +02:00
server.conf.in all: fix typos in documentation and comments 2017-03-17 15:11:20 +01:00