Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package corosync-qdevice for
openSUSE:Factory checked in at 2026-05-08 16:48:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/corosync-qdevice (Old)
and /work/SRC/openSUSE:Factory/.corosync-qdevice.new.1966 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "corosync-qdevice"
Fri May 8 16:48:17 2026 rev:7 rq:1352011 version:3.0.4
Changes:
--------
--- /work/SRC/openSUSE:Factory/corosync-qdevice/corosync-qdevice.changes
2026-01-23 17:34:02.420341139 +0100
+++
/work/SRC/openSUSE:Factory/.corosync-qdevice.new.1966/corosync-qdevice.changes
2026-05-08 16:48:36.501238347 +0200
@@ -1,0 +2,6 @@
+Fri May 8 09:24:37 UTC 2026 - Nicholas Yang <[email protected]>
+
+- Modify 0001-harden-services-with-systemd-sandboxing.patch:
+ * Add NoNewPrivileges=true back
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ 0001-harden-services-with-systemd-sandboxing.patch ++++++
--- /var/tmp/diff_new_pack.1Ex78l/_old 2026-05-08 16:48:37.049261057 +0200
+++ /var/tmp/diff_new_pack.1Ex78l/_new 2026-05-08 16:48:37.053261223 +0200
@@ -1,12 +1,12 @@
-From e9f0bf98fee6efe53c060d463501ed3ea95335a6 Mon Sep 17 00:00:00 2001
+From f7b8fd41b82ef11933f2d2b0e8f54192dfbcfa18 Mon Sep 17 00:00:00 2001
From: nicholasyang <[email protected]>
-Date: Mon, 28 Apr 2025 12:28:51 +0800
+Date: Wed, 13 Nov 2024 16:11:10 +0800
Subject: [PATCH] harden services with systemd sandboxing
---
init/corosync-qdevice.service.in | 10 ++++++++++
- init/corosync-qnetd.service.in | 12 ++++++++++++
- 2 files changed, 22 insertions(+)
+ init/corosync-qnetd.service.in | 13 +++++++++++++
+ 2 files changed, 23 insertions(+)
diff --git a/init/corosync-qdevice.service.in
b/init/corosync-qdevice.service.in
index 5ffb498..824e557 100644
@@ -29,10 +29,10 @@
[Install]
WantedBy=multi-user.target
diff --git a/init/corosync-qnetd.service.in b/init/corosync-qnetd.service.in
-index a8d6a7e..6e84b02 100644
+index a8d6a7e..64da610 100644
--- a/init/corosync-qnetd.service.in
+++ b/init/corosync-qnetd.service.in
-@@ -16,5 +16,17 @@ Restart=on-abnormal
+@@ -16,5 +16,18 @@ Restart=on-abnormal
RuntimeDirectory=corosync-qnetd
RuntimeDirectoryMode=0770
@@ -47,10 +47,11 @@
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
++NoNewPrivileges=true
+
[Install]
WantedBy=multi-user.target
--
-2.49.0
+2.47.0
