Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package razercfg for openSUSE:Factory checked in at 2021-12-10 21:52:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/razercfg (Old) and /work/SRC/openSUSE:Factory/.razercfg.new.2520 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "razercfg" Fri Dec 10 21:52:26 2021 rev:9 rq:938258 version:0.42 Changes: -------- --- /work/SRC/openSUSE:Factory/razercfg/razercfg.changes 2021-04-17 23:24:55.141589337 +0200 +++ /work/SRC/openSUSE:Factory/.razercfg.new.2520/razercfg.changes 2021-12-10 21:52:37.770899051 +0100 @@ -1,0 +2,6 @@ +Mon Nov 15 09:31:15 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): + * harden_razerd.service.patch + +------------------------------------------------------------------- New: ---- harden_razerd.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ razercfg.spec ++++++ --- /var/tmp/diff_new_pack.EuMEAc/_old 2021-12-10 21:52:40.294900167 +0100 +++ /var/tmp/diff_new_pack.EuMEAc/_new 2021-12-10 21:52:40.298900168 +0100 @@ -31,6 +31,7 @@ # PATCH-FIX-OPENSUSE razercfg-fix-install-in-libdir -- Install libraries in matching directories (e.g. lib64 for 64bit). # Reported upstream 21. July 2015 Patch0: razercfg-fix-install-in-libdir.patch +Patch1: harden_razerd.service.patch BuildRequires: cmake BuildRequires: help2man BuildRequires: hicolor-icon-theme @@ -50,6 +51,7 @@ %prep %setup -q %patch0 -p1 +%patch1 -p1 %build %cmake ++++++ harden_razerd.service.patch ++++++ Index: razercfg-0.42/razerd.service.template =================================================================== --- razercfg-0.42.orig/razerd.service.template +++ razercfg-0.42/razerd.service.template @@ -4,6 +4,17 @@ Requires=local-fs.target After=local-fs.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStart=@CMAKE_INSTALL_PREFIX@/bin/razerd -f [Install]
