Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pam_pkcs11 for openSUSE:Factory checked in at 2022-03-25 21:54:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pam_pkcs11 (Old) and /work/SRC/openSUSE:Factory/.pam_pkcs11.new.1900 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pam_pkcs11" Fri Mar 25 21:54:39 2022 rev:34 rq:964747 version:0.6.12 Changes: -------- --- /work/SRC/openSUSE:Factory/pam_pkcs11/pam_pkcs11.changes 2022-01-25 17:37:35.961702394 +0100 +++ /work/SRC/openSUSE:Factory/.pam_pkcs11.new.1900/pam_pkcs11.changes 2022-03-25 21:54:47.506284965 +0100 @@ -10,0 +11,6 @@ +Thu Oct 14 10:34:54 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * pkcs11_eventmgr.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pkcs11_eventmgr.service ++++++ --- /var/tmp/diff_new_pack.tyrJix/_old 2022-03-25 21:54:48.078285509 +0100 +++ /var/tmp/diff_new_pack.tyrJix/_new 2022-03-25 21:54:48.082285513 +0100 @@ -2,6 +2,17 @@ Description=pkcs11 event manager [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=read-only +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking ExecStart=/usr/bin/pkcs11_eventmgr StandardOutput=journal
