Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package subversion for openSUSE:Factory checked in at 2021-11-29 17:28:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/subversion (Old) and /work/SRC/openSUSE:Factory/.subversion.new.31177 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "subversion" Mon Nov 29 17:28:21 2021 rev:185 rq:934123 version:1.14.1 Changes: -------- --- /work/SRC/openSUSE:Factory/subversion/subversion.changes 2021-11-12 15:59:23.442568424 +0100 +++ /work/SRC/openSUSE:Factory/.subversion.new.31177/subversion.changes 2021-12-02 02:27:16.116189666 +0100 @@ -1,0 +2,6 @@ +Wed Nov 24 09:59:19 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * svnserve.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ svnserve.service ++++++ --- /var/tmp/diff_new_pack.PDRHAB/_old 2021-12-02 02:27:17.072186368 +0100 +++ /var/tmp/diff_new_pack.PDRHAB/_new 2021-12-02 02:27:17.072186368 +0100 @@ -3,6 +3,18 @@ After=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking EnvironmentFile=/etc/sysconfig/svnserve User=svn
