Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mailgraph for openSUSE:Factory checked in at 2021-10-29 22:34:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mailgraph (Old) and /work/SRC/openSUSE:Factory/.mailgraph.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mailgraph" Fri Oct 29 22:34:39 2021 rev:9 rq:928143 version:1.14 Changes: -------- --- /work/SRC/openSUSE:Factory/mailgraph/mailgraph.changes 2020-12-17 17:09:05.481958135 +0100 +++ /work/SRC/openSUSE:Factory/.mailgraph.new.1890/mailgraph.changes 2021-10-29 22:35:43.951716099 +0200 @@ -1,0 +2,6 @@ +Wed Oct 6 11:39:24 UTC 2021 - Johannes Segitz <[email protected]> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * mailgraph.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mailgraph.service ++++++ --- /var/tmp/diff_new_pack.CdeiLa/_old 2021-10-29 22:35:44.431716280 +0200 +++ /var/tmp/diff_new_pack.CdeiLa/_new 2021-10-29 22:35:44.431716280 +0200 @@ -4,6 +4,19 @@ After=mail-transfer-agent.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Environment="MAILGRAPH_OPTS=-v --statfile /var/log/mailgraph/mailgraph.stats" Environment="MAILGRAPH_PID=/var/run/mailgraph.pid" Environment="MAILGRAPH_RRD=/var/lib/mailgraph"
