Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package fluidsynth for openSUSE:Factory checked in at 2021-10-19 23:03:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/fluidsynth (Old) and /work/SRC/openSUSE:Factory/.fluidsynth.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "fluidsynth" Tue Oct 19 23:03:28 2021 rev:62 rq:925514 version:2.2.2 Changes: -------- --- /work/SRC/openSUSE:Factory/fluidsynth/fluidsynth.changes 2021-09-20 23:32:06.575096221 +0200 +++ /work/SRC/openSUSE:Factory/.fluidsynth.new.1890/fluidsynth.changes 2021-10-19 23:03:30.473264244 +0200 @@ -1,0 +2,5 @@ +Fri Oct 15 12:11:47 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fluidsynth.service ++++++ --- /var/tmp/diff_new_pack.nDxJiG/_old 2021-10-19 23:03:31.041264502 +0200 +++ /var/tmp/diff_new_pack.nDxJiG/_new 2021-10-19 23:03:31.041264502 +0200 @@ -9,7 +9,6 @@ ProtectSystem=full ProtectHome=true ProtectHostname=true -ProtectClock=true ProtectKernelTunables=true ProtectKernelModules=true ProtectKernelLogs=true ++++++ harden_fluidsynth.service.patch ++++++ --- /var/tmp/diff_new_pack.nDxJiG/_old 2021-10-19 23:03:31.049264505 +0200 +++ /var/tmp/diff_new_pack.nDxJiG/_new 2021-10-19 23:03:31.053264507 +0200 @@ -2,7 +2,7 @@ =================================================================== --- fluidsynth-2.2.2.orig/fluidsynth.service.in +++ fluidsynth-2.2.2/fluidsynth.service.in -@@ -4,6 +4,17 @@ Documentation=man:fluidsynth(1) +@@ -4,6 +4,16 @@ Documentation=man:fluidsynth(1) After=sound.target [Service] @@ -11,7 +11,6 @@ +ProtectSystem=full +ProtectHome=true +ProtectHostname=true -+ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true
