Bug ID 1232044
Summary error using in ddclient due to systemd hardening effort
Classification openSUSE
Product openSUSE Distribution
Version Leap 15.6
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Other
Assignee screening-team-bugs@suse.de
Reporter gcomes.obs@gmail.com
QA Contact qa-bugs@suse.de
Target Milestone ---
Found By ---
Blocker ---

After the recent update of ddclient to version 3.10.0 my configuration did not
work properly anymore. In /var/log/messages I got:
WARNING:  found neither IPv4 nor IPv6 address
WARNING:  updating xxxxx: nochg: No update required; unnecessary attempts to
change to the current address are considered abusive

with the last message repeated every 5 minutes. At first I thought ddclient was
at fault (version 3.10.0 has several issues), but then I figured out that the
problem was due to the systemd hardening effort:
  https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

In ddclient.conf I use:
  use=cmd, cmd="ipmitool ...."
In /usr/lib/systemd/system/ddclient.service there is:
  [Service]
  PrivateDevices=true
which makes the ipmitool command executed by the ddclient process to not report
the correct information.

This bug report is therefore for the security team. Let them evaluate how to
properly fix the use case I have.


You are receiving this mail because: