Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package deepin-file-manager for
openSUSE:Factory checked in at 2021-09-14 21:14:23
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/deepin-file-manager (Old)
and /work/SRC/openSUSE:Factory/.deepin-file-manager.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "deepin-file-manager"
Tue Sep 14 21:14:23 2021 rev:4 rq:918799 version:5.2.24
Changes:
--------
--- /work/SRC/openSUSE:Factory/deepin-file-manager/deepin-file-manager.changes
2021-08-18 08:56:07.634959713 +0200
+++
/work/SRC/openSUSE:Factory/.deepin-file-manager.new.1899/deepin-file-manager.changes
2021-09-14 21:14:31.984413477 +0200
@@ -1,0 +2,6 @@
+Fri Sep 3 07:13:32 UTC 2021 - Johannes Segitz <[email protected]>
+
+- Added hardening to systemd service(s). Added patch(es):
+ * harden_dde-filemanager-daemon.service.patch
+
+-------------------------------------------------------------------
New:
----
harden_dde-filemanager-daemon.service.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ deepin-file-manager.spec ++++++
--- /var/tmp/diff_new_pack.Wl67z4/_old 2021-09-14 21:14:36.020417438 +0200
+++ /var/tmp/diff_new_pack.Wl67z4/_new 2021-09-14 21:14:36.028417446 +0200
@@ -41,6 +41,7 @@
Patch1: fix-return-type-error.patch
# PATCH-FIX-UPSTEAM fix-header-include.patch [email protected] - dfsearch
is necessary
Patch2: fix-header-include.patch
+Patch3: harden_dde-filemanager-daemon.service.patch
%ifarch ppc ppc64 ppc64le s390 s390x
BuildRequires: deepin-desktop-base
%else
++++++ harden_dde-filemanager-daemon.service.patch ++++++
Index:
dde-file-manager-5.2.24/src/dde-file-manager-daemon/dbusservice/dde-filemanager-daemon.service
===================================================================
---
dde-file-manager-5.2.24.orig/src/dde-file-manager-daemon/dbusservice/dde-filemanager-daemon.service
+++
dde-file-manager-5.2.24/src/dde-file-manager-daemon/dbusservice/dde-filemanager-daemon.service
@@ -2,6 +2,17 @@
Description=DDE File Manager Daemon
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=dbus
BusName=com.deepin.filemanager.daemon
ExecStart=/usr/bin/dde-file-manager-daemon
