Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package fwnn for openSUSE:Factory checked in at 2021-09-20 23:32:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/fwnn (Old) and /work/SRC/openSUSE:Factory/.fwnn.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "fwnn" Mon Sep 20 23:32:54 2021 rev:27 rq:920058 version:1.1.1a023.1 Changes: -------- --- /work/SRC/openSUSE:Factory/fwnn/fwnn.changes 2019-08-22 15:08:12.310499218 +0200 +++ /work/SRC/openSUSE:Factory/.fwnn.new.1899/fwnn.changes 2021-09-20 23:34:28.503271559 +0200 @@ -1,0 +2,9 @@ +Thu Sep 16 07:16:15 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * fcwnn.service + * fkwnn.service + * ftwnn.service + * fwnn.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fcwnn.service ++++++ --- /var/tmp/diff_new_pack.orxUVS/_old 2021-09-20 23:34:29.211272434 +0200 +++ /var/tmp/diff_new_pack.orxUVS/_new 2021-09-20 23:34:29.211272434 +0200 @@ -3,6 +3,19 @@ Description=Free Wnn (mainland) Chinese Server, for input of simplified Chinese [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking User=wnn ExecStartPre=/bin/rm -f /tmp/cd_sockV4 ++++++ fkwnn.service ++++++ --- /var/tmp/diff_new_pack.orxUVS/_old 2021-09-20 23:34:29.239272469 +0200 +++ /var/tmp/diff_new_pack.orxUVS/_new 2021-09-20 23:34:29.243272474 +0200 @@ -3,6 +3,19 @@ Description=Free Wnn Korean Server, for input of Korean [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking User=wnn ExecStartPre=/bin/rm -f /tmp/kd_sockV4 ++++++ ftwnn.service ++++++ --- /var/tmp/diff_new_pack.orxUVS/_old 2021-09-20 23:34:29.263272498 +0200 +++ /var/tmp/diff_new_pack.orxUVS/_new 2021-09-20 23:34:29.263272498 +0200 @@ -3,6 +3,19 @@ Description=Free Wnn Taiwan-Chinese Server, for input of traditional Chinese [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking User=wnn ExecStartPre=/bin/rm -f /tmp/td_sockV4 ++++++ fwnn.service ++++++ --- /var/tmp/diff_new_pack.orxUVS/_old 2021-09-20 23:34:29.303272548 +0200 +++ /var/tmp/diff_new_pack.orxUVS/_new 2021-09-20 23:34:29.303272548 +0200 @@ -3,6 +3,19 @@ Description=Free Wnn Kanji Server used for input of Japanese [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking User=wnn ExecStartPre=/bin/rm -f /tmp/jd_sockV4
