Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package accountsservice for openSUSE:Factory
checked in at 2021-08-25 20:56:10
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/accountsservice (Old)
and /work/SRC/openSUSE:Factory/.accountsservice.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "accountsservice"
Wed Aug 25 20:56:10 2021 rev:72 rq:913679 version:0.6.55
Changes:
--------
--- /work/SRC/openSUSE:Factory/accountsservice/accountsservice.changes
2021-03-16 15:44:05.669007425 +0100
+++
/work/SRC/openSUSE:Factory/.accountsservice.new.1899/accountsservice.changes
2021-08-25 20:56:27.673298803 +0200
@@ -1,0 +2,11 @@
+Mon Aug 9 09:36:20 UTC 2021 - Yifan Jiang <yfji...@suse.com>
+
+- Spec layout cleaning up for harden_accounts-daemon.service.patch.
+
+-------------------------------------------------------------------
+Tue Jul 27 11:53:56 UTC 2021 - Johannes Segitz <jseg...@suse.com>
+
+- Added hardening to systemd service(s). Added patch(es):
+ * harden_accounts-daemon.service.patch
+
+-------------------------------------------------------------------
New:
----
harden_accounts-daemon.service.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ accountsservice.spec ++++++
--- /var/tmp/diff_new_pack.lYcxdE/_old 2021-08-25 20:56:28.325297947 +0200
+++ /var/tmp/diff_new_pack.lYcxdE/_new 2021-08-25 20:56:28.329297941 +0200
@@ -36,6 +36,8 @@
Patch3: accountsservice-wtmp-io-improvements.patch
# PATCH-FIX-UPSTREAM accountsservice-fix-gdm-crash.patch
glfo#accountsservice/accountsservice#55 antoine.belv...@opensuse.org -- Prevent
gdm crash upon service restart when autologin is enabled
Patch4: accountsservice-fix-gdm-crash.patch
+# PATCH-FIX-OPENSUSE harden_accounts-daemon.service.patch jseg...@suse.com --
For details please see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+Patch5: harden_accounts-daemon.service.patch
## SLE and Leap only patches start at 1000
# PATCH-FEATURE-SLE as-fate318433-prevent-same-account-multi-logins.patch
fate#318433 cxi...@suse.com -- prevent multiple simultaneous login.
@@ -103,6 +105,7 @@
%patch2 -p1
%patch3 -p1
%patch4 -p1
+%patch5 -p1
# SLE and Leap patches start at 1000
%if 0%{?sle_version}
++++++ harden_accounts-daemon.service.patch ++++++
Index: accountsservice-0.6.55/data/accounts-daemon.service.in
===================================================================
--- accountsservice-0.6.55.orig/data/accounts-daemon.service.in
+++ accountsservice-0.6.55/data/accounts-daemon.service.in
@@ -8,6 +8,16 @@ After=nss-user-lookup.target
Wants=nss-user-lookup.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
Type=dbus
BusName=org.freedesktop.Accounts
ExecStart=@libexecdir@/accounts-daemon
