Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dhcp for openSUSE:Factory checked in at 2022-01-14 23:12:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dhcp (Old) and /work/SRC/openSUSE:Factory/.dhcp.new.1892 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dhcp" Fri Jan 14 23:12:48 2022 rev:128 rq:945908 version:4.4.2.P1 Changes: -------- --- /work/SRC/openSUSE:Factory/dhcp/dhcp.changes 2021-11-08 17:24:28.812704965 +0100 +++ /work/SRC/openSUSE:Factory/.dhcp.new.1892/dhcp.changes 2022-01-14 23:13:27.166639996 +0100 @@ -9,0 +10,9 @@ +Mon Sep 13 13:50:50 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * dhcpd.service + * dhcpd6.service + * dhcrelay.service + * dhcrelay6.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dhcpd.service ++++++ --- /var/tmp/diff_new_pack.Ao7l6g/_old 2022-01-14 23:13:28.258640700 +0100 +++ /var/tmp/diff_new_pack.Ao7l6g/_new 2022-01-14 23:13:28.262640702 +0100 @@ -4,6 +4,18 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target slapd.service sssd.service ndsd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=on-abort ExecStart=@LIBEXECDIR@/dhcp/dhcpd -4 start ++++++ dhcpd6.service ++++++ --- /var/tmp/diff_new_pack.Ao7l6g/_old 2022-01-14 23:13:28.286640718 +0100 +++ /var/tmp/diff_new_pack.Ao7l6g/_new 2022-01-14 23:13:28.290640720 +0100 @@ -4,6 +4,18 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target slapd.service sssd.service ndsd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=on-abort ExecStart=@LIBEXECDIR@/dhcp/dhcpd -6 start ++++++ dhcrelay.service ++++++ --- /var/tmp/diff_new_pack.Ao7l6g/_old 2022-01-14 23:13:28.310640733 +0100 +++ /var/tmp/diff_new_pack.Ao7l6g/_new 2022-01-14 23:13:28.314640736 +0100 @@ -4,6 +4,18 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target ldap.service ndsd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=on-abort ExecStart=@LIBEXECDIR@/dhcp/dhcrelay -4 start ++++++ dhcrelay6.service ++++++ --- /var/tmp/diff_new_pack.Ao7l6g/_old 2022-01-14 23:13:28.330640746 +0100 +++ /var/tmp/diff_new_pack.Ao7l6g/_new 2022-01-14 23:13:28.334640748 +0100 @@ -4,6 +4,18 @@ After=remote-fs.target network.target nss-lookup.target time-sync.target ldap.service ndsd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking Restart=on-abort ExecStart=@LIBEXECDIR@/dhcp/dhcrelay -6 start
