Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package phoronix-test-suite for
openSUSE:Factory checked in at 2021-10-23 00:51:16
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/phoronix-test-suite (Old)
and /work/SRC/openSUSE:Factory/.phoronix-test-suite.new.1890 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "phoronix-test-suite"
Sat Oct 23 00:51:16 2021 rev:12 rq:926881 version:10.4.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/phoronix-test-suite/phoronix-test-suite.changes
2021-07-03 20:51:01.688685982 +0200
+++
/work/SRC/openSUSE:Factory/.phoronix-test-suite.new.1890/phoronix-test-suite.changes
2021-10-23 00:52:00.549148695 +0200
@@ -1,0 +2,8 @@
+Tue Oct 19 09:12:46 UTC 2021 - Johannes Segitz <[email protected]>
+
+- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
+ * harden_phoromatic-client.service.patch
+ * harden_phoromatic-server.service.patch
+ * harden_phoronix-result-server.service.patch
+
+-------------------------------------------------------------------
New:
----
harden_phoromatic-client.service.patch
harden_phoromatic-server.service.patch
harden_phoronix-result-server.service.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ phoronix-test-suite.spec ++++++
--- /var/tmp/diff_new_pack.jXysKl/_old 2021-10-23 00:52:00.985148889 +0200
+++ /var/tmp/diff_new_pack.jXysKl/_new 2021-10-23 00:52:00.985148889 +0200
@@ -24,6 +24,9 @@
Group: System/Benchmark
URL: http://www.phoronix-test-suite.com/
Source0:
https://phoronix-test-suite.com/releases/phoronix-test-suite-%{version}.tar.gz
+Patch0: harden_phoromatic-client.service.patch
+Patch1: harden_phoromatic-server.service.patch
+Patch2: harden_phoronix-result-server.service.patch
# https://github.com/phoronix-test-suite/phoronix-test-suite/issues/505
[bsc#1175508]
BuildRequires: fdupes
BuildRequires: hicolor-icon-theme
@@ -58,6 +61,9 @@
%prep
%setup -q -n %{name}
find ob-cache -type f -name *.sh -exec chmod +x {} \;
+%patch0 -p1
+%patch1 -p1
+%patch2 -p1
%build
++++++ harden_phoromatic-client.service.patch ++++++
Index: phoronix-test-suite/deploy/phoromatic-systemd/phoromatic-client.service
===================================================================
--- phoronix-test-suite.orig/deploy/phoromatic-systemd/phoromatic-client.service
+++ phoronix-test-suite/deploy/phoromatic-systemd/phoromatic-client.service
@@ -4,6 +4,19 @@ After=syslog.target network-online.targe
Documentation=man:phoronix-test-suite(1)
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
TimeoutStartSec=300
ExecStart=/usr/bin/phoronix-test-suite phoromatic.connect
Environment=DISPLAY=:0
++++++ harden_phoromatic-server.service.patch ++++++
Index: phoronix-test-suite/deploy/phoromatic-systemd/phoromatic-server.service
===================================================================
--- phoronix-test-suite.orig/deploy/phoromatic-systemd/phoromatic-server.service
+++ phoronix-test-suite/deploy/phoromatic-systemd/phoromatic-server.service
@@ -4,6 +4,19 @@ After=syslog.target network.target
Documentation=man:phoronix-test-suite(1)
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
TimeoutStartSec=300
ExecStart=/usr/bin/phoronix-test-suite start-phoromatic-server
Restart=on-failure
++++++ harden_phoronix-result-server.service.patch ++++++
Index:
phoronix-test-suite/deploy/phoromatic-systemd/phoronix-result-server.service
===================================================================
---
phoronix-test-suite.orig/deploy/phoromatic-systemd/phoronix-result-server.service
+++ phoronix-test-suite/deploy/phoromatic-systemd/phoronix-result-server.service
@@ -4,6 +4,19 @@ After=syslog.target network.target
Documentation=man:phoronix-test-suite(1)
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
TimeoutStartSec=300
ExecStart=/usr/bin/phoronix-test-suite start-result-viewer daemon
Restart=on-failure
