Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package amavisd-milter for openSUSE:Factory checked in at 2021-07-31 18:51:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/amavisd-milter (Old) and /work/SRC/openSUSE:Factory/.amavisd-milter.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "amavisd-milter" Sat Jul 31 18:51:42 2021 rev:2 rq:909531 version:1.7.1 Changes: -------- --- /work/SRC/openSUSE:Factory/amavisd-milter/amavisd-milter.changes 2021-03-05 13:49:41.627863127 +0100 +++ /work/SRC/openSUSE:Factory/.amavisd-milter.new.1899/amavisd-milter.changes 2021-07-31 18:52:33.190447047 +0200 @@ -1,0 +2,6 @@ +Wed Jul 28 07:47:49 UTC 2021 - Johannes Segitz <jsegitz@suse.com> + +- Added hardening to systemd service(s). Modified: + * amavisd-milter.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ amavisd-milter.service ++++++ --- /var/tmp/diff_new_pack.XSAMJT/_old 2021-07-31 18:52:33.606446550 +0200 +++ /var/tmp/diff_new_pack.XSAMJT/_new 2021-07-31 18:52:33.606446550 +0200 @@ -4,6 +4,17 @@ Before=mail-transfer-agent.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true PIDFile=/var/spool/amavis/amavisd-milter.pid ExecStart=/usr/sbin/amavisd-milter ExecReload=/usr/bin/kill -HUP $MAINPID