Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package soapy-remote for openSUSE:Factory checked in at 2021-11-20 02:38:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/soapy-remote (Old) and /work/SRC/openSUSE:Factory/.soapy-remote.new.1895 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "soapy-remote" Sat Nov 20 02:38:59 2021 rev:7 rq:932323 version:0.5.2 Changes: -------- --- /work/SRC/openSUSE:Factory/soapy-remote/soapy-remote.changes 2021-10-15 23:03:44.566088017 +0200 +++ /work/SRC/openSUSE:Factory/.soapy-remote.new.1895/soapy-remote.changes 2021-11-20 02:40:05.764590903 +0100 @@ -1,0 +2,6 @@ +Wed Nov 17 10:38:32 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): + * harden_SoapySDRServer.service.patch + +------------------------------------------------------------------- New: ---- harden_SoapySDRServer.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ soapy-remote.spec ++++++ --- /var/tmp/diff_new_pack.RXlow5/_old 2021-11-20 02:40:06.212589424 +0100 +++ /var/tmp/diff_new_pack.RXlow5/_new 2021-11-20 02:40:06.216589411 +0100 @@ -29,6 +29,7 @@ Url: https://github.com/pothosware/SoapyRemote/wiki #Git-Clone: https://github.com/pothosware/SoapyRemote.git Source: https://github.com/pothosware/SoapyRemote/archive/%{name}-%{version}.tar.gz +Patch0: harden_SoapySDRServer.service.patch BuildRequires: cmake BuildRequires: gcc-c++ BuildRequires: pkg-config @@ -62,6 +63,7 @@ %prep %setup -q -n SoapyRemote-%{name}-%{version} +%patch0 -p1 %build %cmake ++++++ harden_SoapySDRServer.service.patch ++++++ Index: SoapyRemote-soapy-remote-0.5.2/system/SoapySDRServer.service.in =================================================================== --- SoapyRemote-soapy-remote-0.5.2.orig/system/SoapySDRServer.service.in +++ SoapyRemote-soapy-remote-0.5.2/system/SoapySDRServer.service.in @@ -4,6 +4,17 @@ Wants=network-online.target After=network-online.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStart=@CMAKE_INSTALL_PREFIX@/bin/SoapySDRServer --bind KillMode=process Restart=on-failure
