Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package wrapsix for openSUSE:Factory checked in at 2022-01-13 00:22:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/wrapsix (Old) and /work/SRC/openSUSE:Factory/.wrapsix.new.1892 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "wrapsix" Thu Jan 13 00:22:32 2022 rev:2 rq:945852 version:0.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/wrapsix/wrapsix.changes 2018-12-13 19:48:41.000682403 +0100 +++ /work/SRC/openSUSE:Factory/.wrapsix.new.1892/wrapsix.changes 2022-01-13 00:23:29.615978746 +0100 @@ -1,0 +2,6 @@ +Wed Jan 5 11:48:46 UTC 2022 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * wrapsix.service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ wrapsix.service ++++++ --- /var/tmp/diff_new_pack.7dffFM/_old 2022-01-13 00:23:29.983979011 +0100 +++ /var/tmp/diff_new_pack.7dffFM/_new 2022-01-13 00:23:29.983979011 +0100 @@ -4,6 +4,17 @@ WantedBy=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=simple ExecStart=/usr/sbin/wrapsix /etc/wrapsix.conf