Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package powertop for openSUSE:Factory 
checked in at 2021-11-11 21:38:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/powertop (Old)
 and      /work/SRC/openSUSE:Factory/.powertop.new.1890 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "powertop"

Thu Nov 11 21:38:17 2021 rev:56 rq:930842 version:2.14

Changes:
--------
--- /work/SRC/openSUSE:Factory/powertop/powertop.changes        2021-06-07 
22:44:12.224556384 +0200
+++ /work/SRC/openSUSE:Factory/.powertop.new.1890/powertop.changes      
2021-11-11 21:39:23.973018947 +0100
@@ -1,0 +2,6 @@
+Thu Nov 11 09:41:32 UTC 2021 - Johannes Segitz <jseg...@suse.com>
+
+- Added hardening to systemd service(s) (bsc#1181400). Modified:
+  * powertop.service
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ powertop.service ++++++
--- /var/tmp/diff_new_pack.suNwpz/_old  2021-11-11 21:39:24.405019263 +0100
+++ /var/tmp/diff_new_pack.suNwpz/_new  2021-11-11 21:39:24.405019263 +0100
@@ -2,6 +2,18 @@
 Description=Extend the battery life of laptop
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=oneshot
 ExecStart=/usr/sbin/powertop --auto-tune
 

Reply via email to