Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gpm for openSUSE:Factory checked in at 2021-10-20 20:22:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gpm (Old) and /work/SRC/openSUSE:Factory/.gpm.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gpm" Wed Oct 20 20:22:43 2021 rev:54 rq:925658 version:1.20.7 Changes: -------- --- /work/SRC/openSUSE:Factory/gpm/gpm.changes 2021-03-12 13:30:47.674113328 +0100 +++ /work/SRC/openSUSE:Factory/.gpm.new.1890/gpm.changes 2021-10-20 20:22:51.729325402 +0200 @@ -1,0 +2,6 @@ +Fri Oct 15 07:29:47 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * gpm.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gpm.service ++++++ --- /var/tmp/diff_new_pack.6Rq7jj/_old 2021-10-20 20:22:52.757326037 +0200 +++ /var/tmp/diff_new_pack.6Rq7jj/_new 2021-10-20 20:22:52.757326037 +0200 @@ -6,6 +6,17 @@ # to add socket activation here. [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions EnvironmentFile=-/etc/sysconfig/mouse ExecStart=/usr/sbin/gpm -m /dev/input/mice -t exps2 Type=forking
