Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package courier-authlib for openSUSE:Factory
checked in at 2021-09-09 23:07:49
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/courier-authlib (Old)
and /work/SRC/openSUSE:Factory/.courier-authlib.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "courier-authlib"
Thu Sep 9 23:07:49 2021 rev:52 rq:917793 version:0.71.3
Changes:
--------
--- /work/SRC/openSUSE:Factory/courier-authlib/courier-authlib.changes
2021-04-14 10:11:29.489545603 +0200
+++
/work/SRC/openSUSE:Factory/.courier-authlib.new.1899/courier-authlib.changes
2021-09-09 23:08:20.500886494 +0200
@@ -1,0 +2,6 @@
+Mon Aug 30 13:24:07 UTC 2021 - Johannes Segitz <[email protected]>
+
+- Added hardening to systemd service(s). Modified:
+ * courier-authdaemon.service
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ courier-authdaemon.service ++++++
--- /var/tmp/diff_new_pack.mvNchU/_old 2021-09-09 23:08:21.092887181 +0200
+++ /var/tmp/diff_new_pack.mvNchU/_new 2021-09-09 23:08:21.096887185 +0200
@@ -3,6 +3,19 @@
After=syslog.target network.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
EnvironmentFile=/etc/authlib/authdaemonrc
PIDFile=/run/courier-authlib/pid
ExecStart=/usr/sbin/courierlogger -pid=/run/courier-authlib/pid $LOGGEROPTS
-start /usr/lib/courier-authlib/authdaemond
