Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dhcp for openSUSE:Factory checked in at 2022-01-20 00:12:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dhcp (Old) and /work/SRC/openSUSE:Factory/.dhcp.new.1892 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dhcp" Thu Jan 20 00:12:01 2022 rev:130 rq:946929 version:4.4.2.P1 Changes: -------- --- /work/SRC/openSUSE:Factory/dhcp/dhcp.changes 2022-01-15 19:59:43.421520125 +0100 +++ /work/SRC/openSUSE:Factory/.dhcp.new.1892/dhcp.changes 2022-01-20 00:12:34.598590891 +0100 @@ -1,0 +2,11 @@ +Mon Jan 17 08:52:07 UTC 2022 - Johannes Segitz <[email protected]> + +- Drop PrivateDevices and ProtectClock hardenings. They clash with + the chroot logic (bsc#1194722) + +------------------------------------------------------------------- +Fri Jan 14 13:19:38 UTC 2022 - Callum Farmer <[email protected]> + +- Add now working CONFIG parameter to sysusers generator + +------------------------------------------------------------------- @@ -7,0 +19,9 @@ + +------------------------------------------------------------------- +Mon Sep 13 13:50:50 UTC 2021 - Johannes Segitz <[email protected]> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * dhcpd.service + * dhcpd6.service + * dhcrelay.service + * dhcrelay6.service ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dhcp.spec ++++++ --- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:35.934591969 +0100 +++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:35.942591976 +0100 @@ -1,7 +1,7 @@ # # spec file for package dhcp # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -274,7 +274,7 @@ : building dhcp sources %make_build %if %{with sysusers} -%sysusers_generate_pre %{SOURCE47} dhcp-server +%sysusers_generate_pre %{SOURCE47} dhcp-server dhcp-user.conf %endif %check ++++++ dhcpd.service ++++++ --- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:36.198592183 +0100 +++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:36.206592189 +0100 @@ -4,6 +4,16 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target slapd.service sssd.service ndsd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=on-abort ExecStart=@LIBEXECDIR@/dhcp/dhcpd -4 start ++++++ dhcpd6.service ++++++ --- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:36.238592215 +0100 +++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:36.242592218 +0100 @@ -4,6 +4,16 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target slapd.service sssd.service ndsd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=on-abort ExecStart=@LIBEXECDIR@/dhcp/dhcpd -6 start ++++++ dhcrelay.service ++++++ --- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:36.270592241 +0100 +++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:36.270592241 +0100 @@ -4,6 +4,16 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target ldap.service ndsd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=on-abort ExecStart=@LIBEXECDIR@/dhcp/dhcrelay -4 start ++++++ dhcrelay6.service ++++++ --- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:36.298592263 +0100 +++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:36.302592266 +0100 @@ -4,6 +4,16 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target ldap.service ndsd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=on-abort ExecStart=@LIBEXECDIR@/dhcp/dhcrelay -6 start
