Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ServiceReport for openSUSE:Factory checked in at 2021-07-30 23:22:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ServiceReport (Old) and /work/SRC/openSUSE:Factory/.ServiceReport.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "ServiceReport" Fri Jul 30 23:22:26 2021 rev:5 rq:909402 version:2.2.3 Changes: -------- --- /work/SRC/openSUSE:Factory/ServiceReport/ServiceReport.changes 2021-07-16 00:03:20.148295497 +0200 +++ /work/SRC/openSUSE:Factory/.ServiceReport.new.1899/ServiceReport.changes 2021-07-30 23:22:59.579582605 +0200 @@ -1,0 +2,5 @@ +Tue Jul 27 09:15:52 UTC 2021 - Johannes Segitz <jsegitz@suse.com> + +- Added hardening to systemd service(s). Added harden_servicereport.service.patch + +------------------------------------------------------------------- New: ---- harden_servicereport.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ServiceReport.spec ++++++ --- /var/tmp/diff_new_pack.DrsAA6/_old 2021-07-30 23:22:59.983582160 +0200 +++ /var/tmp/diff_new_pack.DrsAA6/_new 2021-07-30 23:22:59.983582160 +0200 @@ -28,6 +28,7 @@ Group: System/Management URL: https://github.com/linux-ras/ServiceReport Source: https://github.com/linux-ras/ServiceReport/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz +Patch: harden_servicereport.service.patch BuildRequires: %{python} BuildRequires: %{python}-setuptools BuildRequires: systemd-rpm-macros ++++++ harden_servicereport.service.patch ++++++ Index: ServiceReport-2.2.3/service/servicereport.service =================================================================== --- ServiceReport-2.2.3.orig/service/servicereport.service +++ ServiceReport-2.2.3/service/servicereport.service @@ -3,6 +3,17 @@ Description=ServiceReport Wants=kdump.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true Type=oneshot ExecStart=/usr/bin/servicereport -v