Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package haveged for openSUSE:Factory checked in at 2021-11-20 23:24:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/haveged (Old) and /work/SRC/openSUSE:Factory/.haveged.new.1895 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "haveged" Sat Nov 20 23:24:11 2021 rev:61 rq: version:1.9.14 Changes: -------- --- /work/SRC/openSUSE:Factory/haveged/haveged.changes 2021-11-20 02:39:00.624805848 +0100 +++ /work/SRC/openSUSE:Factory/.haveged.new.1895/haveged.changes 2021-11-20 23:24:12.560604107 +0100 @@ -16,9 +15,0 @@ -Tue Sep 21 12:15:06 UTC 2021 - Johannes Segitz <jseg...@suse.com> - -- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): - * harden_haveged.service.patch - Modified: - * haveged-switch-root.service - * haveged.service - -------------------------------------------------------------------- Old: ---- harden_haveged.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ haveged.spec ++++++ --- /var/tmp/diff_new_pack.X8P4pu/_old 2021-11-20 23:24:13.208601923 +0100 +++ /var/tmp/diff_new_pack.X8P4pu/_new 2021-11-20 23:24:13.208601923 +0100 @@ -32,7 +32,6 @@ Patch0: ppc64le.patch # PATCH-FIX-UPSTREAM: don't write to syslog at startup to avoid deadlocks psim...@suse.com bnc#959237 Patch2: haveged-no-syslog.patch -Patch3: harden_haveged.service.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool ++++++ haveged-switch-root.service ++++++ --- /var/tmp/diff_new_pack.X8P4pu/_old 2021-11-20 23:24:13.256601761 +0100 +++ /var/tmp/diff_new_pack.X8P4pu/_new 2021-11-20 23:24:13.256601761 +0100 @@ -8,19 +8,6 @@ [Service] ExecStart=-/usr/sbin/haveged -c root=/sysroot PrivateNetwork=yes -# added automatically, for details please see -# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -ProtectSystem=full -ProtectHome=true -PrivateDevices=true -ProtectHostname=true -ProtectClock=true -ProtectKernelTunables=true -ProtectKernelModules=true -ProtectKernelLogs=true -ProtectControlGroups=true -RestrictRealtime=true -# end of automatic additions Type=oneshot StandardInput=null StandardOutput=null ++++++ haveged.service ++++++ --- /var/tmp/diff_new_pack.X8P4pu/_old 2021-11-20 23:24:13.276601694 +0100 +++ /var/tmp/diff_new_pack.X8P4pu/_new 2021-11-20 23:24:13.276601694 +0100 @@ -12,19 +12,6 @@ ExecStart=/usr/sbin/haveged -w 1024 -v 0 -F CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT PrivateNetwork=yes -# added automatically, for details please see -# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort -ProtectSystem=full -ProtectHome=true -PrivateDevices=true -ProtectHostname=true -ProtectClock=true -ProtectKernelTunables=true -ProtectKernelModules=true -ProtectKernelLogs=true -ProtectControlGroups=true -RestrictRealtime=true -# end of automatic additions Restart=always SuccessExitStatus=137 143
