Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package miredo for openSUSE:Factory checked in at 2021-10-16 22:47:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/miredo (Old) and /work/SRC/openSUSE:Factory/.miredo.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "miredo" Sat Oct 16 22:47:13 2021 rev:4 rq:925615 version:1.2.6 Changes: -------- --- /work/SRC/openSUSE:Factory/miredo/miredo.changes 2020-06-17 14:49:44.636859647 +0200 +++ /work/SRC/openSUSE:Factory/.miredo.new.1890/miredo.changes 2021-10-16 22:47:48.992700833 +0200 @@ -1,0 +2,7 @@ +Wed Oct 6 14:07:59 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * miredo-client.service + * miredo-server.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ miredo-client.service ++++++ --- /var/tmp/diff_new_pack.sCA0Kl/_old 2021-10-16 22:47:49.440701210 +0200 +++ /var/tmp/diff_new_pack.sCA0Kl/_new 2021-10-16 22:47:49.440701210 +0200 @@ -3,6 +3,19 @@ After=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking PIDFile=/run/miredo.pid ExecStart=/usr/sbin/miredo ++++++ miredo-server.service ++++++ --- /var/tmp/diff_new_pack.sCA0Kl/_old 2021-10-16 22:47:49.456701224 +0200 +++ /var/tmp/diff_new_pack.sCA0Kl/_new 2021-10-16 22:47:49.456701224 +0200 @@ -3,6 +3,19 @@ After=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking PIDFile=/run/miredo-server.pid ExecStart=/usr/sbin/miredo-server
