commit systemd-zram-service for openSUSE:Factory

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package systemd-zram-service for openSUSE:Factory checked in at 2021-11-28 21:30:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/systemd-zram-service (Old) and /work/SRC/openSUSE:Factory/.systemd-zram-service.new.1895 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "systemd-zram-service" Sun Nov 28 21:30:27 2021 rev:2 rq:934425 version:0.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/systemd-zram-service/systemd-zram-service.changes 2018-12-28 12:33:56.360021333 +0100 +++ /work/SRC/openSUSE:Factory/.systemd-zram-service.new.1895/systemd-zram-service.changes 2021-11-28 21:31:48.973748419 +0100 @@ -1,0 +2,6 @@ +Wed Nov 24 12:39:05 UTC 2021 - Johannes Segitz <jsegitz@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * zramswap.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zramswap.service ++++++ --- /var/tmp/diff_new_pack.gUk5aH/_old 2021-11-28 21:31:49.397747062 +0100 +++ /var/tmp/diff_new_pack.gUk5aH/_new 2021-11-28 21:31:49.397747062 +0100 @@ -8,6 +8,19 @@ After=multi-user.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=oneshot ExecStart=/usr/sbin/zramswapon ExecStop=/usr/sbin/zramswapoff
participants (1)
-
Source-Sync