diff --git a/README.md b/README.md index cfb3ba9..eb27021 100644 --- a/README.md +++ b/README.md @@ -46,7 +46,7 @@ logging: { // replace the default logging option ...defaultSettings.logging, // You can check the default settings Yunohost generates at `/opt/yunohost/nodered/data/settings.js` and find the documentation for configuring Node-RED here: https://nodered.org/docs/user-guide/runtime/configuration -**Shipped version:** 3.0.2~ynh1 +**Shipped version:** 3.0.2~ynh2 ## Screenshots diff --git a/README_fr.md b/README_fr.md index 6368b07..74cf202 100644 --- a/README_fr.md +++ b/README_fr.md @@ -49,7 +49,7 @@ module.exports = (defaultSettings) => ({ Vous pouvez consulter les paramètres par défaut générez par Yunohost dans `/opt/yunohost/nodered/data/settings.js` et trouver la documentation pour configurer Node-RED ici: https://nodered.org/docs/user-guide/runtime/configuration -**Version incluse :** 3.0.2~ynh1 +**Version incluse :** 3.0.2~ynh2 ## Captures d'écran diff --git a/conf/systemd.service b/conf/systemd.service index e0b498e..e53c8e1 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -18,7 +18,8 @@ StandardError=inherit # Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html NoNewPrivileges=yes PrivateTmp=yes -PrivateDevices=yes +# Remove to allow the app to talk to USB devices +#PrivateDevices=yes RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK RestrictNamespaces=yes RestrictRealtime=yes @@ -28,7 +29,8 @@ ProtectControlGroups=yes ProtectKernelModules=yes ProtectKernelTunables=yes LockPersonality=yes -SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap +# @setuid removed from the list because it is needed by some network utilities (ping) +SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @swap # Denying access to capabilities that should not be relevant for webapps # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html diff --git a/manifest.json b/manifest.json index 3fa8b76..0bc0a44 100644 --- a/manifest.json +++ b/manifest.json @@ -6,7 +6,7 @@ "en": "Flow-based programming for the Internet of Things", "fr": "Programmation par flux de données pour l'Internet des objets" }, - "version": "3.0.2~ynh1", + "version": "3.0.2~ynh2", "url": "https://nodered.org", "upstream": { "license": "Apache-2.0",