Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package ServiceReport for openSUSE:Factory checked in at 2021-07-30 23:22:26
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ServiceReport (Old)
and /work/SRC/openSUSE:Factory/.ServiceReport.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ServiceReport"
Fri Jul 30 23:22:26 2021 rev:5 rq:909402 version:2.2.3
Changes:
--------
--- /work/SRC/openSUSE:Factory/ServiceReport/ServiceReport.changes 2021-07-16 00:03:20.148295497 +0200
+++ /work/SRC/openSUSE:Factory/.ServiceReport.new.1899/ServiceReport.changes 2021-07-30 23:22:59.579582605 +0200
@@ -1,0 +2,5 @@
+Tue Jul 27 09:15:52 UTC 2021 - Johannes Segitz
+
+- Added hardening to systemd service(s). Added harden_servicereport.service.patch
+
+-------------------------------------------------------------------
New:
----
harden_servicereport.service.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ ServiceReport.spec ++++++
--- /var/tmp/diff_new_pack.DrsAA6/_old 2021-07-30 23:22:59.983582160 +0200
+++ /var/tmp/diff_new_pack.DrsAA6/_new 2021-07-30 23:22:59.983582160 +0200
@@ -28,6 +28,7 @@
Group: System/Management
URL: https://github.com/linux-ras/ServiceReport
Source: https://github.com/linux-ras/ServiceReport/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Patch: harden_servicereport.service.patch
BuildRequires: %{python}
BuildRequires: %{python}-setuptools
BuildRequires: systemd-rpm-macros
++++++ harden_servicereport.service.patch ++++++
Index: ServiceReport-2.2.3/service/servicereport.service
===================================================================
--- ServiceReport-2.2.3.orig/service/servicereport.service
+++ ServiceReport-2.2.3/service/servicereport.service
@@ -3,6 +3,17 @@ Description=ServiceReport
Wants=kdump.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
Type=oneshot
ExecStart=/usr/bin/servicereport -v