From 764735c3ed76dfe8f114d94a9a56d6fcefcca9f236cf9c1298c119db30a98375 Mon Sep 17 00:00:00 2001 From: "Dr. Werner Fink" Date: Thu, 21 Oct 2021 11:07:44 +0000 Subject: [PATCH 1/2] Accepting request 926719 from home:jsegitz:branches:systemdhardening:openSUSE:Factory Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/926719 OBS-URL: https://build.opensuse.org/package/show/Base:System/sysvinit?expand=0&rev=253 --- powerd.service | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/powerd.service b/powerd.service index 14d6846..3d10306 100644 --- a/powerd.service +++ b/powerd.service @@ -4,6 +4,17 @@ Documentation=man:powerd(8) ConditionPathExists=/etc/powerd.conf [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking PIDFile=/var/run/powerd.pid ExecStart=/sbin/powerd From 9584a5829514c4ebf5255dc7216c5f41fbe755c598f07d7e6c010f862653cd38 Mon Sep 17 00:00:00 2001 From: "Dr. Werner Fink" Date: Thu, 21 Oct 2021 11:31:01 +0000 Subject: [PATCH 2/2] Add missing changelog. OBS-URL: https://build.opensuse.org/package/show/Base:System/sysvinit?expand=0&rev=254 --- powerd.changes | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/powerd.changes b/powerd.changes index 3c292c3..17d4a7a 100644 --- a/powerd.changes +++ b/powerd.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Oct 21 11:29:51 UTC 2021 - Dr. Werner Fink + +- Automatic systemd hardening effort by the security team. This has + not been tested. For details please see + https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort + ------------------------------------------------------------------- Wed Nov 25 15:04:45 UTC 2020 - Ludwig Nussel