Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package inn for openSUSE:Factory checked in at 2022-02-13 19:51:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/inn (Old) and /work/SRC/openSUSE:Factory/.inn.new.1956 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "inn" Sun Feb 13 19:51:04 2022 rev:44 rq:954075 version:2.6.4 Changes: -------- --- /work/SRC/openSUSE:Factory/inn/inn.changes 2021-12-19 17:44:06.528647997 +0100 +++ /work/SRC/openSUSE:Factory/.inn.new.1956/inn.changes 2022-02-13 19:51:49.166336842 +0100 @@ -47,0 +48,6 @@ +Wed Sep 22 14:43:56 UTC 2021 - Johannes Segitz <[email protected]> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * inn.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ inn.service ++++++ --- /var/tmp/diff_new_pack.pVeHvn/_old 2022-02-13 19:51:49.802338536 +0100 +++ /var/tmp/diff_new_pack.pVeHvn/_new 2022-02-13 19:51:49.802338536 +0100 @@ -4,6 +4,19 @@ After=nss-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions User=news PIDFile=/run/news/innd.pid Type=forking
