Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mgetty for openSUSE:Factory checked in at 2021-10-16 22:47:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mgetty (Old) and /work/SRC/openSUSE:Factory/.mgetty.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mgetty" Sat Oct 16 22:47:17 2021 rev:41 rq:925653 version:1.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/mgetty/mgetty.changes 2021-07-10 22:54:55.243564875 +0200 +++ /work/SRC/openSUSE:Factory/.mgetty.new.1890/mgetty.changes 2021-10-16 22:47:53.156704342 +0200 @@ -1,0 +2,7 @@ +Fri Oct 15 07:28:25 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * mgetty@.service + * vgetty@.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mgetty@.service ++++++ --- /var/tmp/diff_new_pack.iw8wCg/_old 2021-10-16 22:47:53.808704891 +0200 +++ /var/tmp/diff_new_pack.iw8wCg/_new 2021-10-16 22:47:53.808704891 +0200 @@ -8,6 +8,17 @@ IgnoreOnIsolate=yes [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStart=-/usr/sbin/mgetty /dev/%I Type=idle Restart=always ++++++ vgetty@.service ++++++ --- /var/tmp/diff_new_pack.iw8wCg/_old 2021-10-16 22:47:53.824704905 +0200 +++ /var/tmp/diff_new_pack.iw8wCg/_new 2021-10-16 22:47:53.824704905 +0200 @@ -8,6 +8,17 @@ IgnoreOnIsolate=yes [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStart=-/usr/sbin/vgetty /dev/%I Type=idle Restart=always
