Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package acct for openSUSE:Factory checked in at 2021-10-16 22:47:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/acct (Old) and /work/SRC/openSUSE:Factory/.acct.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "acct" Sat Oct 16 22:47:09 2021 rev:44 rq:925614 version:6.6.4 Changes: -------- --- /work/SRC/openSUSE:Factory/acct/acct.changes 2019-03-18 10:44:04.211100130 +0100 +++ /work/SRC/openSUSE:Factory/.acct.new.1890/acct.changes 2021-10-16 22:47:42.380695261 +0200 @@ -1,0 +2,6 @@ +Tue Jul 27 11:54:39 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s). Modified: + * acct.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ acct.spec ++++++ --- /var/tmp/diff_new_pack.0rftss/_old 2021-10-16 22:47:42.840695649 +0200 +++ /var/tmp/diff_new_pack.0rftss/_new 2021-10-16 22:47:42.840695649 +0200 @@ -1,7 +1,7 @@ # # spec file for package acct # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ Summary: User-Specific Process Accounting License: GPL-2.0-or-later Group: System/Base -Url: https://www.gnu.org/software/acct/ +URL: https://www.gnu.org/software/acct/ Source: https://ftp.gnu.org/gnu/acct/%{name}-%{version}.tar.gz Source1: acct.service Source2: logrotate.acct ++++++ acct.service ++++++ --- /var/tmp/diff_new_pack.0rftss/_old 2021-10-16 22:47:42.876695679 +0200 +++ /var/tmp/diff_new_pack.0rftss/_new 2021-10-16 22:47:42.876695679 +0200 @@ -3,6 +3,17 @@ Documentation=man:accton(8) [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true Type=oneshot RemainAfterExit=true ExecStartPre=/usr/bin/chmod 600 /var/log/account/pacct
