Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gammu for openSUSE:Factory checked in at 2021-12-29 21:10:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gammu (Old) and /work/SRC/openSUSE:Factory/.gammu.new.2520 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gammu" Wed Dec 29 21:10:45 2021 rev:54 rq:942926 version:1.42.0 Changes: -------- --- /work/SRC/openSUSE:Factory/gammu/gammu.changes 2021-05-10 15:41:17.165108279 +0200 +++ /work/SRC/openSUSE:Factory/.gammu.new.2520/gammu.changes 2021-12-29 21:10:58.606286518 +0100 @@ -1,0 +2,6 @@ +Fri Oct 15 07:32:06 UTC 2021 - Johannes Segitz <[email protected]> + +- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): + * harden_gammu-smsd.service.patch + +------------------------------------------------------------------- New: ---- harden_gammu-smsd.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gammu.spec ++++++ --- /var/tmp/diff_new_pack.39nOxX/_old 2021-12-29 21:10:59.110286932 +0100 +++ /var/tmp/diff_new_pack.39nOxX/_new 2021-12-29 21:10:59.114286935 +0100 @@ -31,6 +31,7 @@ Patch2: 0001-Enable-fPIE-pie.patch Patch3: 0001-Update-Python-scripts-to-Python-3.patch Patch4: 0001-Docs-Adjust-attributes-order-to-avoid-bugs-in-breath.patch +Patch5: harden_gammu-smsd.service.patch BuildRequires: cmake >= 2.8 BuildRequires: doxygen BuildRequires: gettext @@ -189,6 +190,7 @@ %patch2 -p1 %patch3 -p1 %patch4 -p1 +%patch5 -p1 # GPL-3.0 licensed files, bnc#775397 rm -rf contrib/sms-gammu2android ++++++ harden_gammu-smsd.service.patch ++++++ Index: gammu-1.42.0/contrib/init/gammu-smsd.service =================================================================== --- gammu-1.42.0.orig/contrib/init/gammu-smsd.service +++ gammu-1.42.0/contrib/init/gammu-smsd.service @@ -4,6 +4,16 @@ Documentation=man:gammu-smsd(1) After=mysql.service postgresql.service network-online.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions EnvironmentFile=-/etc/sysconfig/gammu-smsd # Run daemon as root user ExecStart=${CMAKE_INSTALL_FULL_BINDIR}/gammu-smsd --pid=/var/run/gammu-smsd.pid --daemon
