| commit | 2c44691e0a1baf7ea19ec3c121634d661355b77e | [log] [tgz] |
|---|---|---|
| author | Oleksandr Tymoshenko <ovt@google.com> | Thu May 25 06:35:44 2023 +0000 |
| committer | Oleksandr Tymoshenko <ovt@google.com> | Fri May 26 17:40:48 2023 +0000 |
| tree | fa521740b2d38a20b4f698211b605db924857ddb | |
| parent | fc6158398cf1591fe425a91eefb91e40c321975d [diff] |
app-admin/localtoast: add dependency to chronyd.service One of the CIS benchmarks relies on chronyd being in a stable state: uid of the process should be that of user "ntp". But the transition from user root to user ntp happens late in the service initialization sequence. So there is a chance that cis-compliance-scanner will check the process at a wrong time, since there is no dependency between cis-levelX and chronyd service. To fix this add explicit dependency to chronyd.service. BUG=b/284075200 TEST=presubmit RELEASE_NOTE=None Change-Id: If83d77cb986b005999329382beb54b4955b6bc05 Reviewed-on: https://cos-review.googlesource.com/c/cos/overlays/board-overlays/+/49832 Reviewed-by: Michael Kochera <kochera@google.com> Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
diff --git a/project-lakitu/app-admin/localtoast/files/cis-level1-amd64.service b/project-lakitu/app-admin/localtoast/files/cis-level1-amd64.service index bcb97ab..ae52ea9 100644 --- a/project-lakitu/app-admin/localtoast/files/cis-level1-amd64.service +++ b/project-lakitu/app-admin/localtoast/files/cis-level1-amd64.service
@@ -1,5 +1,7 @@ [Unit] Description=Check level-1 CIS Compliance by using CIS Scanner +After=chronyd.service +Requires=chronyd.service [Service] Type=oneshot
diff --git a/project-lakitu/app-admin/localtoast/files/cis-level1-arm64.service b/project-lakitu/app-admin/localtoast/files/cis-level1-arm64.service index 4ee31c9..42befb7 100644 --- a/project-lakitu/app-admin/localtoast/files/cis-level1-arm64.service +++ b/project-lakitu/app-admin/localtoast/files/cis-level1-arm64.service
@@ -1,5 +1,7 @@ [Unit] Description=Check level-1 CIS Compliance by using CIS Scanner +After=chronyd.service +Requires=chronyd.service [Service] Type=oneshot
diff --git a/project-lakitu/app-admin/localtoast/files/cis-level2-amd64.service b/project-lakitu/app-admin/localtoast/files/cis-level2-amd64.service index bfb00ab..ea964ec 100644 --- a/project-lakitu/app-admin/localtoast/files/cis-level2-amd64.service +++ b/project-lakitu/app-admin/localtoast/files/cis-level2-amd64.service
@@ -1,5 +1,7 @@ [Unit] Description=Check for CIS Compliance up to level-2 by using CIS Scanner +After=chronyd.service +Requires=chronyd.service [Service] Type=oneshot
diff --git a/project-lakitu/app-admin/localtoast/files/cis-level2-arm64.service b/project-lakitu/app-admin/localtoast/files/cis-level2-arm64.service index 587d429..63df713 100644 --- a/project-lakitu/app-admin/localtoast/files/cis-level2-arm64.service +++ b/project-lakitu/app-admin/localtoast/files/cis-level2-arm64.service
@@ -1,5 +1,7 @@ [Unit] Description=Check for CIS Compliance up to level-2 by using CIS Scanner +After=chronyd.service +Requires=chronyd.service [Service] Type=oneshot
diff --git a/project-lakitu/app-admin/localtoast/localtoast-1.1.5.1-r2.ebuild b/project-lakitu/app-admin/localtoast/localtoast-1.1.5.1-r3.ebuild similarity index 100% rename from project-lakitu/app-admin/localtoast/localtoast-1.1.5.1-r2.ebuild rename to project-lakitu/app-admin/localtoast/localtoast-1.1.5.1-r3.ebuild