- fix diff for lvm based configs (bsc#1216191)

diff --git a/data/snapperd.service b/data/snapperd.service
index 6dbda8c0f8a7e2cfa66a3ed15b20cecf88dfeb06..e27cc9f6296a37caa31a5ff7dfe2e07222688f8e 100644 (file)
--- a/data/snapperd.service
+++ b/data/snapperd.service
@@ -14,3 +14,4 @@ PrivateNetwork=true
 ProtectHostname=true
 RestrictAddressFamilies=AF_UNIX
 RestrictRealtime=true
+PrivateMounts=no

diff --git a/data/systemd-sandboxing.txt b/data/systemd-sandboxing.txt
index d475060f92f9ad6520a85f817b1e38a33f57633d..b27fcae811b4b029bfdbfaee47f328f72dd4d4d6 100644 (file)
--- a/data/systemd-sandboxing.txt
+++ b/data/systemd-sandboxing.txt
@@ -14,8 +14,8 @@ ProtectKernelModules=true breaks LVM.
 
 CapabilityBoundingSet=CAP_SYS_NICE is also needed by LVM.
 
-ProtectHome=true, ProtectControlGroups=true, ProtectKernelLogs=true
-and ProtectKernelTunables=true breaks diff for LVM.
+ProtectHome=true, ProtectControlGroups=true, ProtectKernelLogs=true,
+ProtectKernelTunables=true and PrivateMounts=yes breaks diff for LVM.
 
 SystemCallFilter=@mount breaks almost everything with older systemd,
 e.g. on SLE15 SP1.

diff --git a/package/snapper.changes b/package/snapper.changes
index 22c7b188b5c381ad649d2caaef92e58b86bfa29c..98bf49a8ff4d3c5524c71cdd4b10a81e63f1d765 100644 (file)
--- a/package/snapper.changes
+++ b/package/snapper.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Oct 13 08:56:18 CEST 2023 - aschnell@suse.com
+
+- fix diff for lvm based configs (bsc#1216191)
+
 -------------------------------------------------------------------
 Thu Sep 14 15:45:53 CEST 2023 - aschnell@suse.com