![](https://seccdn.libravatar.org/avatar/a895f78a81a109471893519443e4d933.jpg?s=120&d=mm&r=g)
https://bugzilla.suse.com/show_bug.cgi?id=1207654 https://bugzilla.suse.com/show_bug.cgi?id=1207654#c1 Wolfgang Frisch <wolfgang.frisch@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #1 from Wolfgang Frisch <wolfgang.frisch@suse.com> --- Since there was an older SR [1] from the security team still in flight, I decided to implemented the changes myself [2]. I also went through the suggested systemd hardenings and kept only those that don't interfere with the elevated capabilities required by the capture plugins. The new SR adds a new system user, drops all root privileges and incorporates some of jsegitz' automated systemd hardenings, e.g. disable access to /home. I tested basic WiFi capture functionality, which still works with the new restrictions in place. [1] https://build.opensuse.org/request/show/1046457 [2] https://build.opensuse.org/request/show/1063492 -- You are receiving this mail because: You are on the CC list for the bug.