Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package udisks2 for openSUSE:Factory checked in at 2022-06-10 15:57:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/udisks2 (Old) and /work/SRC/openSUSE:Factory/.udisks2.new.1548 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "udisks2" Fri Jun 10 15:57:20 2022 rev:46 rq:981450 version:2.9.4 Changes: -------- --- /work/SRC/openSUSE:Factory/udisks2/udisks2.changes 2022-02-17 23:40:46.971700787 +0100 +++ /work/SRC/openSUSE:Factory/.udisks2.new.1548/udisks2.changes 2022-06-10 15:57:36.676826181 +0200 @@ -1,0 +2,7 @@ +Fri May 20 07:45:36 UTC 2022 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): + * harden_udisks2-zram-setup@.service.patch + * harden_udisks2.service.patch + +------------------------------------------------------------------- New: ---- harden_udisks2-zram-setup@.service.patch harden_udisks2.service.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ udisks2.spec ++++++ --- /var/tmp/diff_new_pack.EVrhHm/_old 2022-06-10 15:57:37.180826792 +0200 +++ /var/tmp/diff_new_pack.EVrhHm/_new 2022-06-10 15:57:37.184826796 +0200 @@ -30,6 +30,8 @@ Group: System/Daemons URL: https://github.com/storaged-project/udisks Source0: %{url}/releases/download/udisks-%{version}/udisks-%{version}.tar.bz2 +Patch0: harden_udisks2-zram-setup@.service.patch +Patch1: harden_udisks2.service.patch BuildRequires: chrpath BuildRequires: docbook-xsl-stylesheets BuildRequires: gobject-introspection-devel >= 0.6.2 ++++++ harden_udisks2-zram-setup@.service.patch ++++++ Index: udisks-2.9.4/modules/zram/data/udisks2-zram-se...@.service.in =================================================================== --- udisks-2.9.4.orig/modules/zram/data/udisks2-zram-se...@.service.in +++ udisks-2.9.4/modules/zram/data/udisks2-zram-se...@.service.in @@ -5,6 +5,11 @@ After=dev-%i.device Requires=dev-%i.device [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectHostname=true +RestrictRealtime=true +# end of automatic additions Type=oneshot RemainAfterExit=no EnvironmentFile=-@zramconfdir@/%i ++++++ harden_udisks2.service.patch ++++++ Index: udisks-2.9.4/data/udisks2.service.in =================================================================== --- udisks-2.9.4.orig/data/udisks2.service.in +++ udisks-2.9.4/data/udisks2.service.in @@ -3,6 +3,11 @@ Description=Disk Manager Documentation=man:udisks(8) [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectHostname=true +RestrictRealtime=true +# end of automatic additions Type=dbus BusName=org.freedesktop.UDisks2 ExecStart=@udisksdprivdir@/udisksd
