Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package alsa-utils for openSUSE:Factory checked in at 2021-08-02 12:04:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/alsa-utils (Old) and /work/SRC/openSUSE:Factory/.alsa-utils.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "alsa-utils" Mon Aug 2 12:04:58 2021 rev:133 rq:909162 version:1.2.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/alsa-utils/alsa-utils.changes 2021-06-16 20:33:39.946999860 +0200 +++ /work/SRC/openSUSE:Factory/.alsa-utils.new.1899/alsa-utils.changes 2021-08-02 12:05:40.957648214 +0200 @@ -1,0 +2,6 @@ +Wed Jul 28 07:46:26 UTC 2021 - Johannes Segitz <[email protected]> + +- Added hardening to systemd service(s). Modified: + * sound-extra.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sound-extra.service ++++++ --- /var/tmp/diff_new_pack.nX7KGK/_old 2021-08-02 12:05:41.657648065 +0200 +++ /var/tmp/diff_new_pack.nX7KGK/_new 2021-08-02 12:05:41.657648065 +0200 @@ -4,5 +4,14 @@ ConditionPathExists=/proc/asound [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelLogs=true +ProtectControlGroups=true Type=oneshot ExecStart=/usr/lib/systemd/scripts/load-sound-modules.sh
