Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package subversion for openSUSE:Factory 
checked in at 2021-11-29 17:28:21
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/subversion (Old)
 and      /work/SRC/openSUSE:Factory/.subversion.new.31177 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "subversion"

Mon Nov 29 17:28:21 2021 rev:185 rq:934123 version:1.14.1

Changes:
--------
--- /work/SRC/openSUSE:Factory/subversion/subversion.changes    2021-11-12 
15:59:23.442568424 +0100
+++ /work/SRC/openSUSE:Factory/.subversion.new.31177/subversion.changes 
2021-12-02 02:27:16.116189666 +0100
@@ -1,0 +2,6 @@
+Wed Nov 24 09:59:19 UTC 2021 - Johannes Segitz <jseg...@suse.com>
+
+- Added hardening to systemd service(s) (bsc#1181400). Modified:
+  * svnserve.service
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------

++++++ svnserve.service ++++++
--- /var/tmp/diff_new_pack.PDRHAB/_old  2021-12-02 02:27:17.072186368 +0100
+++ /var/tmp/diff_new_pack.PDRHAB/_new  2021-12-02 02:27:17.072186368 +0100
@@ -3,6 +3,18 @@
 After=network.target
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=forking
 EnvironmentFile=/etc/sysconfig/svnserve
 User=svn

Reply via email to