Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package shairport-sync for openSUSE:Factory
checked in at 2023-06-30 19:59:51
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/shairport-sync (Old)
and /work/SRC/openSUSE:Factory/.shairport-sync.new.13546 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "shairport-sync"
Fri Jun 30 19:59:51 2023 rev:18 rq:1096046 version:4.2
Changes:
--------
--- /work/SRC/openSUSE:Factory/shairport-sync/shairport-sync.changes
2023-06-25 21:42:51.345262500 +0200
+++ /work/SRC/openSUSE:Factory/.shairport-sync.new.13546/shairport-sync.changes
2023-06-30 20:00:11.598114916 +0200
@@ -1,0 +2,12 @@
+Sun Jun 25 15:57:57 UTC 2023 - Niklas Haas <o...@haasn.xyz>
+
+- Fix systemd unit file patch to properly apply hardening even
+ when building with avahi enabled (as present in the spec), and also
+ fix hardening patch to not restrict realtime priority.
+
+-------------------------------------------------------------------
+Sun Jun 25 15:37:02 UTC 2023 - Niklas Haas <o...@haasn.xyz>
+
+- Update to use Airplay 2 protocol.
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ shairport-sync.spec ++++++
--- /var/tmp/diff_new_pack.CHaBT7/_old 2023-06-30 20:00:13.214124528 +0200
+++ /var/tmp/diff_new_pack.CHaBT7/_new 2023-06-30 20:00:13.218124552 +0200
@@ -36,18 +36,25 @@
BuildRequires: gnome-common
BuildRequires: pkgconfig
BuildRequires: systemd-rpm-macros
+BuildRequires: xxd
BuildRequires: pkgconfig(alsa)
BuildRequires: pkgconfig(avahi-client)
+BuildRequires: pkgconfig(libavutil)
BuildRequires: pkgconfig(libconfig)
BuildRequires: pkgconfig(libdaemon)
+BuildRequires: pkgconfig(libgcrypt)
BuildRequires: pkgconfig(libpipewire-0.3)
+BuildRequires: pkgconfig(libplist-2.0)
BuildRequires: pkgconfig(libpulse)
+BuildRequires: pkgconfig(libsodium)
BuildRequires: pkgconfig(openssl)
BuildRequires: pkgconfig(popt)
BuildRequires: pkgconfig(sndfile)
BuildRequires: pkgconfig(soxr)
BuildRequires: pkgconfig(systemd)
+BuildRequires: pkgconfig(uuid)
Requires: firewalld
+Requires: nqptp
Requires(pre): shadow
%{?systemd_ordering}
@@ -82,7 +89,8 @@
--with-soxr \
--with-metadata \
--with-configfiles \
- --with-convolution
+ --with-convolution \
+ --with-airplay-2
%make_build
%install
++++++ airplay-server.xml ++++++
--- /var/tmp/diff_new_pack.CHaBT7/_old 2023-06-30 20:00:13.286124957 +0200
+++ /var/tmp/diff_new_pack.CHaBT7/_new 2023-06-30 20:00:13.290124980 +0200
@@ -2,9 +2,14 @@
<service>
<short>airplay-server</short>
<description>Airplay Server</description>
+ <port protocol="tcp" port="3689"/>
<port protocol="tcp" port="5000"/>
- <port protocol="udp" port="6001"/>
- <port protocol="udp" port="6002"/>
- <port protocol="udp" port="6003"/>
+ <port protocol="tcp" port="7000"/>
+ <port protocol="tcp" port="32768-60999"/>
+ <port protocol="udp" port="319"/>
+ <port protocol="udp" port="320"/>
+ <port protocol="udp" port="5353"/>
+ <port protocol="udp" port="6000-6009"/>
+ <port protocol="udp" port="32768-60999"/>
</service>
++++++ harden_shairport-sync.service.patch ++++++
--- /var/tmp/diff_new_pack.CHaBT7/_old 2023-06-30 20:00:13.310125099 +0200
+++ /var/tmp/diff_new_pack.CHaBT7/_new 2023-06-30 20:00:13.322125171 +0200
@@ -1,7 +1,8 @@
-diff -Nur shairport-sync-4.1/scripts/shairport-sync.service.in
shairport-sync-4.1-new/scripts/shairport-sync.service.in
---- shairport-sync-4.1/scripts/shairport-sync.service.in 2022-10-28
23:31:18.000000000 +0800
-+++ shairport-sync-4.1-new/scripts/shairport-sync.service.in 2022-11-13
22:26:15.785234171 +0800
-@@ -5,6 +5,17 @@
+diff --git a/scripts/shairport-sync.service-avahi.in
b/scripts/shairport-sync.service-avahi.in
+index 4a874c54..6bc80c1e 100644
+--- a/scripts/shairport-sync.service-avahi.in
++++ b/scripts/shairport-sync.service-avahi.in
+@@ -7,6 +7,16 @@ Wants=network-online.target
After=network.target network-online.target
[Service]
@@ -14,8 +15,28 @@
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
-+RestrictRealtime=true
-+# end of automatic additions
++# end of automatic additions
+ ExecStart=@prefix@/bin/shairport-sync --log-to-syslog
+ User=shairport-sync
+ Group=shairport-sync
+diff --git a/scripts/shairport-sync.service.in
b/scripts/shairport-sync.service.in
+index 18df3f35..791fd89f 100644
+--- a/scripts/shairport-sync.service.in
++++ b/scripts/shairport-sync.service.in
+@@ -5,6 +5,16 @@ Wants=network-online.target
+ After=network.target network-online.target
+
+ [Service]
++# added automatically, for details please see
++# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
++ProtectSystem=full
++ProtectHome=true
++ProtectHostname=true
++ProtectKernelTunables=true
++ProtectKernelModules=true
++ProtectKernelLogs=true
++ProtectControlGroups=true
++# end of automatic additions
ExecStart=@prefix@/bin/shairport-sync --log-to-syslog
User=shairport-sync
Group=shairport-sync
