Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package prometheus-postgres_exporter for
openSUSE:Factory checked in at 2021-10-29 22:34:36
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/prometheus-postgres_exporter (Old)
and /work/SRC/openSUSE:Factory/.prometheus-postgres_exporter.new.1890
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "prometheus-postgres_exporter"
Fri Oct 29 22:34:36 2021 rev:2 rq:928137 version:0.10.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/prometheus-postgres_exporter/prometheus-postgres_exporter.changes
2021-10-11 15:31:34.654841152 +0200
+++
/work/SRC/openSUSE:Factory/.prometheus-postgres_exporter.new.1890/prometheus-postgres_exporter.changes
2021-10-29 22:35:41.819715293 +0200
@@ -1,0 +2,6 @@
+Wed Oct 20 13:18:17 UTC 2021 - Johannes Segitz <[email protected]>
+
+- Added hardening to systemd service(s) (bsc#1181400). Modified:
+ * prometheus-postgres_exporter.service
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ prometheus-postgres_exporter.service ++++++
--- /var/tmp/diff_new_pack.oRg7Ef/_old 2021-10-29 22:35:42.247715455 +0200
+++ /var/tmp/diff_new_pack.oRg7Ef/_new 2021-10-29 22:35:42.247715455 +0200
@@ -4,6 +4,19 @@
Wants=postgresql.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Restart=always
User=prometheus
EnvironmentFile=-/etc/sysconfig/prometheus-postgres_exporter
