Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package switcheroo-control for openSUSE:Factory checked in at 2021-12-13 20:45:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/switcheroo-control (Old) and /work/SRC/openSUSE:Factory/.switcheroo-control.new.2520 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "switcheroo-control" Mon Dec 13 20:45:08 2021 rev:10 rq:940272 version:2.4 Changes: -------- --- /work/SRC/openSUSE:Factory/switcheroo-control/switcheroo-control.changes 2021-01-18 15:22:02.102319144 +0100 +++ /work/SRC/openSUSE:Factory/.switcheroo-control.new.2520/switcheroo-control.changes 2021-12-13 20:51:14.552667400 +0100 @@ -1,0 +2,6 @@ +Wed Nov 24 10:11:24 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): + * harden_switcheroo-control.service.patch + +------------------------------------------------------------------- New: ---- harden_switcheroo-control.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ switcheroo-control.spec ++++++ --- /var/tmp/diff_new_pack.LUikxf/_old 2021-12-13 20:51:14.996667683 +0100 +++ /var/tmp/diff_new_pack.LUikxf/_new 2021-12-13 20:51:15.000667686 +0100 @@ -25,6 +25,7 @@ URL: https://gitlab.freedesktop.org/hadess/switcheroo-control Source0: https://gitlab.freedesktop.org/hadess/switcheroo-control/-/archive/%{version}/%{name}-%{version}.tar.gz Source1: %{name}-rpmlintrc +Patch0: harden_switcheroo-control.service.patch BuildRequires: gtk-doc BuildRequires: meson >= 0.50 BuildRequires: pkgconfig @@ -52,6 +53,7 @@ %prep %setup -q +%patch0 -p1 %build %meson \ ++++++ harden_switcheroo-control.service.patch ++++++ Index: switcheroo-control-2.4/data/switcheroo-control.service.in =================================================================== --- switcheroo-control-2.4.orig/data/switcheroo-control.service.in +++ switcheroo-control-2.4/data/switcheroo-control.service.in @@ -16,6 +16,12 @@ PrivateTmp=true RestrictAddressFamilies=AF_UNIX AF_LOCAL AF_NETLINK MemoryDenyWriteExecute=true RestrictRealtime=true +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelLogs=true +# end of automatic additions [Install] WantedBy=graphical.target
