Accepting request 925614 from Base:System

OBS-URL: https://build.opensuse.org/request/show/925614
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/acct?expand=0&rev=44

acct.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Jul 27 11:54:39 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
+
+- Added hardening to systemd service(s). Modified:
+  * acct.service
+
 -------------------------------------------------------------------
 Sun Mar 17 10:55:00 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
 

acct.service

@@ -3,6 +3,17 @@ Description=Process accounting
 Documentation=man:accton(8)
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
 Type=oneshot
 RemainAfterExit=true
 ExecStartPre=/usr/bin/chmod 600 /var/log/account/pacct

acct.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package acct
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,7 +22,7 @@ Release:        0
 Summary:        User-Specific Process Accounting
 License:        GPL-2.0-or-later
 Group:          System/Base
-Url:            https://www.gnu.org/software/acct/
+URL:            https://www.gnu.org/software/acct/
 Source:         https://ftp.gnu.org/gnu/acct/%{name}-%{version}.tar.gz
 Source1:        acct.service
 Source2:        logrotate.acct