Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package CoreFreq for openSUSE:Factory checked in at 2021-08-18 08:55:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/CoreFreq (Old) and /work/SRC/openSUSE:Factory/.CoreFreq.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "CoreFreq" Wed Aug 18 08:55:51 2021 rev:9 rq:912382 version:1.86.7 Changes: -------- --- /work/SRC/openSUSE:Factory/CoreFreq/CoreFreq.changes 2021-07-04 22:10:57.577128472 +0200 +++ /work/SRC/openSUSE:Factory/.CoreFreq.new.1899/CoreFreq.changes 2021-08-18 08:56:37.626924449 +0200 @@ -1,0 +2,5 @@ +Tue Jul 27 09:50:10 UTC 2021 - Johannes Segitz <[email protected]> + +- Added hardening to systemd service(s). Added harden_corefreqd.service.patch + +------------------------------------------------------------------- New: ---- harden_corefreqd.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ CoreFreq.spec ++++++ --- /var/tmp/diff_new_pack.cjCj7Z/_old 2021-08-18 08:56:38.110923879 +0200 +++ /var/tmp/diff_new_pack.cjCj7Z/_new 2021-08-18 08:56:38.114923875 +0200 @@ -25,6 +25,7 @@ Source: %{url}/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz Patch0: leap15_2.patch Patch1: leap15_3.patch +Patch2: harden_corefreqd.service.patch BuildRequires: %{kernel_module_package_buildreqs} BuildRequires: pkgconfig BuildRequires: pkgconfig(libsystemd) @@ -46,6 +47,7 @@ %if 0%{?sle_version} == 150300 %patch1 -p1 %endif +%patch2 -p1 %build %make_build ++++++ harden_corefreqd.service.patch ++++++ Index: CoreFreq-1.86.7/corefreqd.service =================================================================== --- CoreFreq-1.86.7.orig/corefreqd.service +++ CoreFreq-1.86.7/corefreqd.service @@ -6,6 +6,14 @@ Description=CoreFreq Daemon [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectClock=true +ProtectKernelModules=true +ProtectKernelLogs=true Type=simple ExecStart=corefreqd -q ExecStop=/bin/kill -QUIT $MAINPID
