Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package motion for openSUSE:Factory checked in at 2021-11-02 19:19:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/motion (Old) and /work/SRC/openSUSE:Factory/.motion.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "motion" Tue Nov 2 19:19:02 2021 rev:11 rq:928756 version:4.3.2 Changes: -------- --- /work/SRC/openSUSE:Factory/motion/motion.changes 2021-10-11 15:32:41.346948074 +0200 +++ /work/SRC/openSUSE:Factory/.motion.new.1890/motion.changes 2021-11-02 19:19:45.975111652 +0100 @@ -1,0 +2,5 @@ +Fri Oct 15 12:12:38 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Drop ProtectClock hardening, can cause issues if other device acceess is needed + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ harden_motion.service.patch ++++++ --- /var/tmp/diff_new_pack.n3PggL/_old 2021-11-02 19:19:46.359111947 +0100 +++ /var/tmp/diff_new_pack.n3PggL/_new 2021-11-02 19:19:46.359111947 +0100 @@ -2,7 +2,7 @@ =================================================================== --- motion-release-4.3.2.orig/data/motion.service.in +++ motion-release-4.3.2/data/motion.service.in -@@ -23,6 +23,17 @@ Documentation=man:motion(1) +@@ -23,6 +23,16 @@ Documentation=man:motion(1) After=local-fs.target network.target [Service] @@ -10,7 +10,6 @@ +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHostname=true -+ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true
