Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package systemd-zram-service for openSUSE:Factory checked in at 2021-11-28 21:30:27
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/systemd-zram-service (Old)
and /work/SRC/openSUSE:Factory/.systemd-zram-service.new.1895 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "systemd-zram-service"
Sun Nov 28 21:30:27 2021 rev:2 rq:934425 version:0.2.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/systemd-zram-service/systemd-zram-service.changes 2018-12-28 12:33:56.360021333 +0100
+++ /work/SRC/openSUSE:Factory/.systemd-zram-service.new.1895/systemd-zram-service.changes 2021-11-28 21:31:48.973748419 +0100
@@ -1,0 +2,6 @@
+Wed Nov 24 12:39:05 UTC 2021 - Johannes Segitz
+
+- Added hardening to systemd service(s) (bsc#1181400). Modified:
+ * zramswap.service
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ zramswap.service ++++++
--- /var/tmp/diff_new_pack.gUk5aH/_old 2021-11-28 21:31:49.397747062 +0100
+++ /var/tmp/diff_new_pack.gUk5aH/_new 2021-11-28 21:31:49.397747062 +0100
@@ -8,6 +8,19 @@
After=multi-user.target
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=oneshot
ExecStart=/usr/sbin/zramswapon
ExecStop=/usr/sbin/zramswapoff
