Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package usb_modeswitch for openSUSE:Factory checked in at 2022-02-17 00:30:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/usb_modeswitch (Old) and /work/SRC/openSUSE:Factory/.usb_modeswitch.new.1956 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "usb_modeswitch" Thu Feb 17 00:30:00 2022 rev:47 rq:954697 version:2.6.1 Changes: -------- --- /work/SRC/openSUSE:Factory/usb_modeswitch/usb_modeswitch.changes 2020-10-03 18:53:43.709362259 +0200 +++ /work/SRC/openSUSE:Factory/.usb_modeswitch.new.1956/usb_modeswitch.changes 2022-02-17 00:30:13.501436459 +0100 @@ -1,0 +2,6 @@ +Fri Nov 26 12:00:38 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): + * harden_usb_modeswitch@.service.patch + +------------------------------------------------------------------- New: ---- harden_usb_modeswitch@.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ usb_modeswitch.spec ++++++ --- /var/tmp/diff_new_pack.4RnLT5/_old 2022-02-17 00:30:14.233436334 +0100 +++ /var/tmp/diff_new_pack.4RnLT5/_new 2022-02-17 00:30:14.233436334 +0100 @@ -31,6 +31,7 @@ Source2: https://www.draisberghof.de/usb_modeswitch/device_reference.txt Source3: https://www.draisberghof.de/usb_modeswitch/parameter_reference.txt Patch1: usb_modeswitch-fix_fsf_address.patch +Patch2: harden_usb_modeswitch@.service.patch BuildRequires: fdupes BuildRequires: pkgconfig BuildRequires: pkgconfig(libusb-1.0) @@ -59,6 +60,7 @@ %prep %setup -q -a1 -n %{source_name}-%{version} %patch1 +%patch2 -p1 cp %{SOURCE2} . cp %{SOURCE3} . ++++++ harden_usb_modeswitch@.service.patch ++++++ Index: usb-modeswitch-2.6.1/usb_modeswitch@.service =================================================================== --- usb-modeswitch-2.6.1.orig/usb_modeswitch@.service +++ usb-modeswitch-2.6.1/usb_modeswitch@.service @@ -2,6 +2,17 @@ Description=USB_ModeSwitch_%i [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=oneshot ExecStart=/usr/sbin/usb_modeswitch_dispatcher --switch-mode %i # Testing
