Not sure what you mean.

The file harden_coturn.service.patch is patching an example systemd unit in coturn upstream source. But this example systemd unit is not used at all. Thus harden_coturn.service.patch is completely useless.

The package itself provides .services files which contain hardening options which are proven to work.

=> no need to maintain an unused back-port patch

Dominique Leuenberger (dimstar) - over 2 years ago

reviewer

Then it probably be nice to convert this hardening into the service file we ship?

---

Michael Ströder (stroeder) - over 2 years ago

author source maintainer

Did you actually look into the existent .service files?

I've added systemd sandboxing options to the .service files on 2020-12-27. These options along with the AppArmor profile is used on my self-hosted installation since then.

---

Dominique Leuenberger (dimstar) - over 2 years ago

reviewer

cool! In this case all is good.