Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package amavisd-new for openSUSE:Factory checked in at 2021-07-29 21:31:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/amavisd-new (Old) and /work/SRC/openSUSE:Factory/.amavisd-new.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "amavisd-new" Thu Jul 29 21:31:54 2021 rev:74 rq:908988 version:2.12.1 Changes: -------- --- /work/SRC/openSUSE:Factory/amavisd-new/amavisd-new.changes 2021-03-05 13:49:40.243861868 +0100 +++ /work/SRC/openSUSE:Factory/.amavisd-new.new.1899/amavisd-new.changes 2021-07-29 21:32:59.684694908 +0200 @@ -1,0 +2,6 @@ +Wed Jul 28 07:49:46 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s). Modified: + * amavis.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ amavis.service ++++++ --- /var/tmp/diff_new_pack.ZeRzuT/_old 2021-07-29 21:33:00.660693693 +0200 +++ /var/tmp/diff_new_pack.ZeRzuT/_new 2021-07-29 21:33:00.664693688 +0200 @@ -22,6 +22,15 @@ Before=mail-transfer-agent.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true Type=notify NotifyAccess=main KillMode=mixed
