Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package conntrack-tools for openSUSE:Factory
checked in at 2021-09-13 16:24:25
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/conntrack-tools (Old)
and /work/SRC/openSUSE:Factory/.conntrack-tools.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "conntrack-tools"
Mon Sep 13 16:24:25 2021 rev:34 rq:917834 version:1.4.6
Changes:
--------
--- /work/SRC/openSUSE:Factory/conntrack-tools/conntrack-tools.changes
2020-04-07 10:20:23.669767297 +0200
+++
/work/SRC/openSUSE:Factory/.conntrack-tools.new.1899/conntrack-tools.changes
2021-09-13 16:24:56.974773735 +0200
@@ -1,0 +2,6 @@
+Mon Aug 30 08:34:07 UTC 2021 - Johannes Segitz <jseg...@suse.com>
+
+- Added hardening to systemd service(s). Modified:
+ * conntrackd.service
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ conntrack-tools.spec ++++++
--- /var/tmp/diff_new_pack.zHAPEL/_old 2021-09-13 16:24:57.590774447 +0200
+++ /var/tmp/diff_new_pack.zHAPEL/_new 2021-09-13 16:24:57.594774452 +0200
@@ -1,7 +1,7 @@
#
# spec file for package conntrack-tools
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -30,8 +30,8 @@
URL: http://conntrack-tools.netfilter.org/
#Git-Clone: git://git.netfilter.org/conntrack-tools
-Source:
ftp://ftp.netfilter.org/pub/conntrack-tools/%name-%version.tar.bz2
-Source2:
ftp://ftp.netfilter.org/pub/conntrack-tools/%name-%version.tar.bz2.sig
+Source:
https://www.netfilter.org/projects/conntrack-tools/files/conntrack-tools-%version.tar.bz2
+Source2:
https://www.netfilter.org/projects/conntrack-tools/files/conntrack-tools-%version.tar.bz2.sig
Source3: %name.keyring
Source5: conntrackd.service
Source6: conntrackd.README.SUSE
++++++ conntrackd.service ++++++
--- /var/tmp/diff_new_pack.zHAPEL/_old 2021-09-13 16:24:57.674774544 +0200
+++ /var/tmp/diff_new_pack.zHAPEL/_new 2021-09-13 16:24:57.674774544 +0200
@@ -15,6 +15,16 @@
Restart=on-failure
ProtectSystem=full
ProtectHome=true
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
WatchdogSec=60
[Install]
