Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package fwnn for openSUSE:Factory checked in
at 2021-09-20 23:32:54
Comparing /work/SRC/openSUSE:Factory/fwnn (Old)
and /work/SRC/openSUSE:Factory/.fwnn.new.1899 (New)
Package is "fwnn"
Mon Sep 20 23:32:54 2021 rev:27 rq:920058 version:1.1.1a023.1
Changes:
--- /work/SRC/openSUSE:Factory/fwnn/fwnn.changes2019-08-22
15:08:12.310499218 +0200
+++ /work/SRC/openSUSE:Factory/.fwnn.new.1899/fwnn.changes 2021-09-20
23:34:28.503271559 +0200
@@ -1,0 +2,9 @@
+Thu Sep 16 07:16:15 UTC 2021 - Johannes Segitz
+
+- Added hardening to systemd service(s) (bsc#1181400). Modified:
+ * fcwnn.service
+ * fkwnn.service
+ * ftwnn.service
+ * fwnn.service
+
+---
Other differences:
--
++ fcwnn.service ++
--- /var/tmp/diff_new_pack.orxUVS/_old 2021-09-20 23:34:29.211272434 +0200
+++ /var/tmp/diff_new_pack.orxUVS/_new 2021-09-20 23:34:29.211272434 +0200
@@ -3,6 +3,19 @@
Description=Free Wnn (mainland) Chinese Server, for input of simplified Chinese
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
User=wnn
ExecStartPre=/bin/rm -f /tmp/cd_sockV4
++ fkwnn.service ++
--- /var/tmp/diff_new_pack.orxUVS/_old 2021-09-20 23:34:29.239272469 +0200
+++ /var/tmp/diff_new_pack.orxUVS/_new 2021-09-20 23:34:29.243272474 +0200
@@ -3,6 +3,19 @@
Description=Free Wnn Korean Server, for input of Korean
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
User=wnn
ExecStartPre=/bin/rm -f /tmp/kd_sockV4
++ ftwnn.service ++
--- /var/tmp/diff_new_pack.orxUVS/_old 2021-09-20 23:34:29.263272498 +0200
+++ /var/tmp/diff_new_pack.orxUVS/_new 2021-09-20 23:34:29.263272498 +0200
@@ -3,6 +3,19 @@
Description=Free Wnn Taiwan-Chinese Server, for input of traditional Chinese
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
User=wnn
ExecStartPre=/bin/rm -f /tmp/td_sockV4
++ fwnn.service ++
--- /var/tmp/diff_new_pack.orxUVS/_old 2021-09-20 23:34:29.303272548 +0200
+++ /var/tmp/diff_new_pack.orxUVS/_new 2021-09-20 23:34:29.303272548 +0200
@@ -3,6 +3,19 @@
Description=Free Wnn Kanji Server used for input of Japanese
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
User=wnn
ExecStartPre=/bin/rm -f /tmp/jd_sockV4
