Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sccache for openSUSE:Factory checked in at 2021-11-20 02:39:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sccache (Old) and /work/SRC/openSUSE:Factory/.sccache.new.1895 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sccache" Sat Nov 20 02:39:05 2021 rev:10 rq:932381 version:0.2.15~git0.6b6d2f7 Changes: -------- --- /work/SRC/openSUSE:Factory/sccache/sccache.changes 2021-11-03 17:26:53.073357524 +0100 +++ /work/SRC/openSUSE:Factory/.sccache.new.1895/sccache.changes 2021-11-20 02:40:13.104566682 +0100 @@ -1,0 +2,7 @@ +Tue Nov 16 15:21:57 UTC 2021 - Johannes Segitz <[email protected]> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * sccache-dist-builder.service + * sccache-dist-scheduler.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sccache-dist-builder.service ++++++ --- /var/tmp/diff_new_pack.I0dPbu/_old 2021-11-20 02:40:13.768564491 +0100 +++ /var/tmp/diff_new_pack.I0dPbu/_new 2021-11-20 02:40:13.772564478 +0100 @@ -3,6 +3,19 @@ After=chronyd.service ntpd.service network-online.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=read-only +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions User=0 Type=simple CacheDirectory=sccache-builder ++++++ sccache-dist-scheduler.service ++++++ --- /var/tmp/diff_new_pack.I0dPbu/_old 2021-11-20 02:40:13.788564425 +0100 +++ /var/tmp/diff_new_pack.I0dPbu/_new 2021-11-20 02:40:13.788564425 +0100 @@ -3,6 +3,19 @@ After=chronyd.service ntpd.service network-online.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=read-only +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions DynamicUser=yes Type=simple Environment="RUST_LOG=sccache=info"
