bab9bb6b69
Create new directories:
ceph
config
config-files
filesystem
kernel
kernel/kernel-modules
ldap
logging
strorage-drivers
tools
utilities
virt
Retire directories:
connectivity
core
devtools
support
extended
Delete two packages:
tgt
irqbalance
Relocated packages:
base/
dhcp
initscripts
libevent
lighttpd
linuxptp
memcached
net-snmp
novnc
ntp
openssh
pam
procps
sanlock
shadow
sudo
systemd
util-linux
vim
watchdog
ceph/
python-cephclient
config/
facter
puppet-4.8.2
puppet-modules
filesystem/
e2fsprogs
nfs-utils
nfscheck
kernel/
kernel-std
kernel-rt
kernel/kernel-modules/
mlnx-ofa_kernel
ldap/
nss-pam-ldapd
openldap
logging/
syslog-ng
logrotate
networking/
lldpd
iproute
mellanox
python-ryu
mlx4-config
python/
python-2.7.5
python-django
python-gunicorn
python-setuptools
python-smartpm
python-voluptuous
security/
shim-signed
shim-unsigned
tboot
strorage-drivers/
python-3parclient
python-lefthandclient
virt/
cloud-init
libvirt
libvirt-python
qemu
tools/
storage-topology
vm-topology
utilities/
tis-extensions
namespace-utils
nova-utils
update-motd
Change-Id: I37ade764d873c701b35eac5881eb40412ba64a86
Story: 2002801
Task: 22687
Signed-off-by: Scott Little <scott.little@windriver.com>
68 lines
2.4 KiB
Diff
68 lines
2.4 KiB
Diff
From 1d9f43c5ecb20fe0a2a4abe9b94abd0d389edb40 Mon Sep 17 00:00:00 2001
|
|
From: Jack Ding <jack.ding@windriver.com>
|
|
Date: Mon, 14 May 2018 22:44:32 -0400
|
|
Subject: [PATCH 2/2] Add dependencies and comment out incompatible service
|
|
parameters
|
|
|
|
---
|
|
scripts/memcached.service | 14 +++++++-------
|
|
1 file changed, 7 insertions(+), 7 deletions(-)
|
|
|
|
diff --git a/scripts/memcached.service b/scripts/memcached.service
|
|
index 8e58485..021b8b4 100644
|
|
--- a/scripts/memcached.service
|
|
+++ b/scripts/memcached.service
|
|
@@ -12,7 +12,7 @@
|
|
[Unit]
|
|
Description=memcached daemon
|
|
Before=httpd.service
|
|
-After=network.target
|
|
+After=network-online.target
|
|
|
|
[Service]
|
|
EnvironmentFile=/etc/sysconfig/memcached
|
|
@@ -46,34 +46,34 @@ LimitNOFILE=16384
|
|
# Explicit module loading will be denied. This allows to turn off module load and unload
|
|
# operations on modular kernels. It is recommended to turn this on for most services that
|
|
# do not need special file systems or extra kernel modules to work.
|
|
-ProtectKernelModules=true
|
|
+#ProtectKernelModules=true
|
|
|
|
# Kernel variables accessible through /proc/sys, /sys, /proc/sysrq-trigger, /proc/latency_stats,
|
|
# /proc/acpi, /proc/timer_stats, /proc/fs and /proc/irq will be made read-only to all processes
|
|
# of the unit. Usually, tunable kernel variables should only be written at boot-time, with the
|
|
# sysctl.d(5) mechanism. Almost no services need to write to these at runtime; it is hence
|
|
# recommended to turn this on for most services.
|
|
-ProtectKernelTunables=true
|
|
+#ProtectKernelTunables=true
|
|
|
|
# The Linux Control Groups (cgroups(7)) hierarchies accessible through /sys/fs/cgroup will be
|
|
# made read-only to all processes of the unit. Except for container managers no services should
|
|
# require write access to the control groups hierarchies; it is hence recommended to turn this on
|
|
# for most services
|
|
-ProtectControlGroups=true
|
|
+#ProtectControlGroups=true
|
|
|
|
# Any attempts to enable realtime scheduling in a process of the unit are refused.
|
|
-RestrictRealtime=true
|
|
+#RestrictRealtime=true
|
|
|
|
# Restricts the set of socket address families accessible to the processes of this unit.
|
|
# Protects against vulnerabilities such as CVE-2016-8655
|
|
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
|
|
|
|
# Takes away the ability to create or manage any kind of namespace
|
|
-RestrictNamespaces=true
|
|
+#RestrictNamespaces=true
|
|
|
|
# WRS
|
|
Restart=always
|
|
-RestartSec=0
|
|
+RestartSec=10
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
--
|
|
1.8.3.1
|
|
|