Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package neard for openSUSE:Factory checked 
in at 2021-10-15 23:04:31
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/neard (Old)
 and      /work/SRC/openSUSE:Factory/.neard.new.1890 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "neard"

Fri Oct 15 23:04:31 2021 rev:11 rq:925506 version:0.16

Changes:
--------
--- /work/SRC/openSUSE:Factory/neard/neard.changes      2021-10-13 
18:10:08.699656285 +0200
+++ /work/SRC/openSUSE:Factory/.neard.new.1890/neard.changes    2021-10-15 
23:05:04.178144775 +0200
@@ -1,0 +2,5 @@
+Fri Oct 15 12:12:44 UTC 2021 - Johannes Segitz <jseg...@suse.com>
+
+- Drop ProtectClock hardening, can cause issues if other device acceess is 
needed
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ harden_neard.service.patch ++++++
--- /var/tmp/diff_new_pack.MBcQSI/_old  2021-10-15 23:05:04.594145072 +0200
+++ /var/tmp/diff_new_pack.MBcQSI/_new  2021-10-15 23:05:04.594145072 +0200
@@ -2,7 +2,7 @@
 ===================================================================
 --- neard-0.16.orig/src/neard.service.in
 +++ neard-0.16/src/neard.service.in
-@@ -3,6 +3,18 @@ Description=neard service
+@@ -3,6 +3,17 @@ Description=neard service
  Documentation=man:neard(8)
  
  [Service]
@@ -11,7 +11,6 @@
 +ProtectSystem=full
 +ProtectHome=true
 +ProtectHostname=true
-+ProtectClock=true
 +ProtectKernelTunables=true
 +ProtectKernelModules=true
 +ProtectKernelLogs=true

++++++ neard.service ++++++
--- /var/tmp/diff_new_pack.MBcQSI/_old  2021-10-15 23:05:04.618145089 +0200
+++ /var/tmp/diff_new_pack.MBcQSI/_new  2021-10-15 23:05:04.618145089 +0200
@@ -8,7 +8,6 @@
 ProtectSystem=full
 ProtectHome=true
 ProtectHostname=true
-ProtectClock=true
 ProtectKernelTunables=true
 ProtectKernelModules=true
 ProtectKernelLogs=true

Reply via email to