Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package arpwatch for openSUSE:Factory checked in at 2021-08-16 10:11:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/arpwatch (Old) and /work/SRC/openSUSE:Factory/.arpwatch.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "arpwatch" Mon Aug 16 10:11:10 2021 rev:35 rq:911812 version:2.1a15 Changes: -------- --- /work/SRC/openSUSE:Factory/arpwatch/arpwatch.changes 2021-07-01 07:05:50.555379526 +0200 +++ /work/SRC/openSUSE:Factory/.arpwatch.new.1899/arpwatch.changes 2021-08-16 10:17:09.050690470 +0200 @@ -1,0 +2,7 @@ +Wed Aug 11 13:47:36 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s). Modified: + * arpwatch.service + * arpwatch@.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ arpwatch.service ++++++ --- /var/tmp/diff_new_pack.CdbwUj/_old 2021-08-16 10:17:09.662689734 +0200 +++ /var/tmp/diff_new_pack.CdbwUj/_new 2021-08-16 10:17:09.662689734 +0200 @@ -11,6 +11,19 @@ Environment=ARPWATCH_ARGS= EnvironmentFile=-/etc/sysconfig/arpwatch PrivateTmp=yes +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStartPre=/usr/bin/touch /var/lib/arpwatch/arp.dat ExecStart=/usr/sbin/arpwatch $ARPWATCH_ARGS -f /var/lib/arpwatch/arp.dat ++++++ arpwatch@.service ++++++ --- /var/tmp/diff_new_pack.CdbwUj/_old 2021-08-16 10:17:09.686689705 +0200 +++ /var/tmp/diff_new_pack.CdbwUj/_new 2021-08-16 10:17:09.686689705 +0200 @@ -11,6 +11,19 @@ Environment=ARPWATCH_ARGS= EnvironmentFile=-/etc/sysconfig/arpwatch PrivateTmp=yes +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStartPre=/usr/bin/touch /var/lib/arpwatch/arp.dat.%i ExecStart=/usr/sbin/arpwatch $ARPWATCH_ARGS -i %i -f /var/lib/arpwatch/arp.dat.%i
