Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package thttpd for openSUSE:Factory checked in at 2022-06-01 17:34:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/thttpd (Old) and /work/SRC/openSUSE:Factory/.thttpd.new.1548 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "thttpd" Wed Jun 1 17:34:41 2022 rev:43 rq:980137 version:2.29 Changes: -------- --- /work/SRC/openSUSE:Factory/thttpd/thttpd.changes 2020-05-17 23:44:10.277178509 +0200 +++ /work/SRC/openSUSE:Factory/.thttpd.new.1548/thttpd.changes 2022-06-01 17:35:01.626766685 +0200 @@ -1,0 +2,6 @@ +Wed Nov 24 15:13:25 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * thttpd.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ thttpd.service ++++++ --- /var/tmp/diff_new_pack.Tz0Wpb/_old 2022-06-01 17:35:02.710767966 +0200 +++ /var/tmp/diff_new_pack.Tz0Wpb/_new 2022-06-01 17:35:02.714767970 +0200 @@ -2,6 +2,19 @@ Description=Tiny HTTP Daemon [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions PIDFile=/run/thttpd.pid ExecStart=/usr/sbin/thttpd -D -C /etc/thttpd.conf Restart=always
