Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package zabbix for openSUSE:Factory checked in at 2022-01-13 00:22:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zabbix (Old) and /work/SRC/openSUSE:Factory/.zabbix.new.1892 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "zabbix" Thu Jan 13 00:22:28 2022 rev:15 rq:945808 version:4.0.34 Changes: -------- --- /work/SRC/openSUSE:Factory/zabbix/zabbix.changes 2021-10-06 19:49:50.864055319 +0200 +++ /work/SRC/openSUSE:Factory/.zabbix.new.1892/zabbix.changes 2022-01-13 00:23:23.611974425 +0100 @@ -1,0 +2,6 @@ +Tue Jan 11 10:35:51 UTC 2022 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * zabbix-java-gateway.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zabbix-java-gateway.service ++++++ --- /var/tmp/diff_new_pack.nSYlQq/_old 2022-01-13 00:23:24.259974891 +0100 +++ /var/tmp/diff_new_pack.nSYlQq/_new 2022-01-13 00:23:24.263974894 +0100 @@ -7,6 +7,19 @@ ExecStart=/usr/bin/zabbix-java-gateway run User=zabbixs PrivateTmp=yes +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions [Install] WantedBy=multi-user.target
