Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package bzflag for openSUSE:Factory checked in at 2021-09-08 21:36:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bzflag (Old) and /work/SRC/openSUSE:Factory/.bzflag.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "bzflag" Wed Sep 8 21:36:41 2021 rev:35 rq:917368 version:2.4.22 Changes: -------- --- /work/SRC/openSUSE:Factory/bzflag/bzflag.changes 2021-03-02 12:48:43.668518406 +0100 +++ /work/SRC/openSUSE:Factory/.bzflag.new.1899/bzflag.changes 2021-09-08 21:37:03.313919277 +0200 @@ -1,0 +2,6 @@ +Thu Aug 26 11:36:28 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s). Modified: + * bzflagserver.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bzflagserver.service ++++++ --- /var/tmp/diff_new_pack.k7DKvr/_old 2021-09-08 21:37:03.953920027 +0200 +++ /var/tmp/diff_new_pack.k7DKvr/_new 2021-09-08 21:37:03.953920027 +0200 @@ -9,6 +9,19 @@ Wants=syslog.socket [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=no TimeoutSec=5min
