Accepting request 914364 from home:jsegitz:branches:systemdhardening:network:utilities

Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/914364
OBS-URL: https://build.opensuse.org/package/show/network:utilities/bwbar?expand=0&rev=11

bwbar.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Aug 25 11:42:40 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
+
+- Added hardening to systemd service(s). Modified:
+  * bwbar.service
+
 -------------------------------------------------------------------
 Thu Nov 23 13:45:50 UTC 2017 - rbrown@suse.com
 

bwbar.service

@@ -3,6 +3,19 @@ Description=Bandwith Usage Monitor
 After=network.target
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 EnvironmentFile=/etc/sysconfig/bwbar
 ExecStart=/usr/bin/bwbar \
 	--${BWBAR_MEASURE} \

bwbar.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package bwbar
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -12,7 +12,7 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
@@ -24,9 +24,9 @@
 Name:           bwbar
 BuildRequires:  gcc-c++
 BuildRequires:  libpng-devel
-Url:            http://www.kernel.org/pub/software/web/bwbar/
+URL:            http://www.kernel.org/pub/software/web/bwbar/
 Summary:        Bandwidth usage bar
-License:        GPL-2.0+
+License:        GPL-2.0-or-later
 Group:          Productivity/Networking/Other
 Version:        1.2.3 
 Release:        0