Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package sshuttle for openSUSE:Factory 
checked in at 2023-07-04 15:23:14
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/sshuttle (Old)
 and      /work/SRC/openSUSE:Factory/.sshuttle.new.23466 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "sshuttle"

Tue Jul  4 15:23:14 2023 rev:17 rq:1096793 version:1.1.1

Changes:
--------
--- /work/SRC/openSUSE:Factory/sshuttle/sshuttle.changes        2023-06-20 
16:48:54.899562137 +0200
+++ /work/SRC/openSUSE:Factory/.sshuttle.new.23466/sshuttle.changes     
2023-07-04 15:24:03.562811194 +0200
@@ -1,0 +2,14 @@
+Tue Jul  4 08:17:54 UTC 2023 - Johannes Segitz <jseg...@suse.com>
+
+- Remove
+  * PrivateDevices=true
+  * ProtectHostname=true
+  * ProtectClock=true
+  * ProtectKernelTunables=true
+  * ProtectKernelModules=true
+  * ProtectKernelLogs=true
+  * RestrictRealtime=true
+  settings from service file as they imply NNP, which doesn't work 
+  with the sudo setup sshuttle uses (bsc#1212949)
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ sshuttle.service ++++++
--- /var/tmp/diff_new_pack.kKH1kd/_old  2023-07-04 15:24:04.106814463 +0200
+++ /var/tmp/diff_new_pack.kKH1kd/_new  2023-07-04 15:24:04.110814488 +0200
@@ -8,14 +8,7 @@
 # https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
 ProtectSystem=full
 ProtectHome=read-only
-PrivateDevices=true
-ProtectHostname=true
-ProtectClock=true
-ProtectKernelTunables=true
-ProtectKernelModules=true
-ProtectKernelLogs=true
 ProtectControlGroups=true
-RestrictRealtime=true
 # end of automatic additions 
 Type=simple
 EnvironmentFile=/etc/sysconfig/sshuttle

Reply via email to