Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package dhcp for openSUSE:Factory checked in
at 2022-01-20 00:12:01
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/dhcp (Old)
and /work/SRC/openSUSE:Factory/.dhcp.new.1892 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dhcp"
Thu Jan 20 00:12:01 2022 rev:130 rq:946929 version:4.4.2.P1
Changes:
--------
--- /work/SRC/openSUSE:Factory/dhcp/dhcp.changes 2022-01-15
19:59:43.421520125 +0100
+++ /work/SRC/openSUSE:Factory/.dhcp.new.1892/dhcp.changes 2022-01-20
00:12:34.598590891 +0100
@@ -1,0 +2,11 @@
+Mon Jan 17 08:52:07 UTC 2022 - Johannes Segitz <jseg...@suse.com>
+
+- Drop PrivateDevices and ProtectClock hardenings. They clash with
+ the chroot logic (bsc#1194722)
+
+-------------------------------------------------------------------
+Fri Jan 14 13:19:38 UTC 2022 - Callum Farmer <gm...@opensuse.org>
+
+- Add now working CONFIG parameter to sysusers generator
+
+-------------------------------------------------------------------
@@ -7,0 +19,9 @@
+
+-------------------------------------------------------------------
+Mon Sep 13 13:50:50 UTC 2021 - Johannes Segitz <jseg...@suse.com>
+
+- Added hardening to systemd service(s) (bsc#1181400). Modified:
+ * dhcpd.service
+ * dhcpd6.service
+ * dhcrelay.service
+ * dhcrelay6.service
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ dhcp.spec ++++++
--- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:35.934591969 +0100
+++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:35.942591976 +0100
@@ -1,7 +1,7 @@
#
# spec file for package dhcp
#
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -274,7 +274,7 @@
: building dhcp sources
%make_build
%if %{with sysusers}
-%sysusers_generate_pre %{SOURCE47} dhcp-server
+%sysusers_generate_pre %{SOURCE47} dhcp-server dhcp-user.conf
%endif
%check
++++++ dhcpd.service ++++++
--- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:36.198592183 +0100
+++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:36.206592189 +0100
@@ -4,6 +4,16 @@
After=remote-fs.target network.target nss-lookup.target time-sync.target
slapd.service sssd.service ndsd.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
Restart=on-abort
ExecStart=@LIBEXECDIR@/dhcp/dhcpd -4 start
++++++ dhcpd6.service ++++++
--- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:36.238592215 +0100
+++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:36.242592218 +0100
@@ -4,6 +4,16 @@
After=remote-fs.target network.target nss-lookup.target time-sync.target
slapd.service sssd.service ndsd.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
Restart=on-abort
ExecStart=@LIBEXECDIR@/dhcp/dhcpd -6 start
++++++ dhcrelay.service ++++++
--- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:36.270592241 +0100
+++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:36.270592241 +0100
@@ -4,6 +4,16 @@
After=remote-fs.target network.target nss-lookup.target time-sync.target
ldap.service ndsd.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
Restart=on-abort
ExecStart=@LIBEXECDIR@/dhcp/dhcrelay -4 start
++++++ dhcrelay6.service ++++++
--- /var/tmp/diff_new_pack.FTySrL/_old 2022-01-20 00:12:36.298592263 +0100
+++ /var/tmp/diff_new_pack.FTySrL/_new 2022-01-20 00:12:36.302592266 +0100
@@ -4,6 +4,16 @@
After=remote-fs.target network.target nss-lookup.target time-sync.target
ldap.service ndsd.service
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
Restart=on-abort
ExecStart=@LIBEXECDIR@/dhcp/dhcrelay -6 start
