From 3270331a70b78e35e694857bdf9d72d089930d1e Mon Sep 17 00:00:00 2001 From: jirislaby <> Date: Aug 11 2021 09:58:28 +0000 Subject: Update 2ping to version 4.5.1 / rev 13 via SR 911254 https://build.opensuse.org/request/show/911254 by user jirislaby + RBrownSUSE --- diff --git a/.files b/.files index e7f8bf6..487236f 100644 Binary files a/.files and b/.files differ diff --git a/.rev b/.rev index 9d2f3cc..dac6803 100644 --- a/.rev +++ b/.rev @@ -105,4 +105,12 @@ - python symbol is not provided by python 3, use proper python3 899911 + + 2d6feda6dfb72903fafdefe958a71e6a + 4.5.1 + + RBrownSUSE + + 911254 + diff --git a/2ping.changes b/2ping.changes index fe64291..8b48923 100644 --- a/2ping.changes +++ b/2ping.changes @@ -1,4 +1,10 @@ ------------------------------------------------------------------- +Tue Aug 10 09:28:47 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s). Added patch(es): + * harden_2ping.service.patch + +------------------------------------------------------------------- Mon Jun 14 09:56:20 UTC 2021 - Jiri Slaby - python symbol is not provided by python 3, use proper python3 diff --git a/2ping.spec b/2ping.spec index 9b893b5..06ec07b 100644 --- a/2ping.spec +++ b/2ping.spec @@ -25,6 +25,7 @@ URL: https://www.finnie.org/software/2ping/ Source0: https://www.finnie.org/software/2ping/%{name}-%{version}.tar.gz Source1: https://www.finnie.org/software/2ping/%{name}-%{version}.tar.gz.asc Source2: %{name}.keyring +Patch0: harden_2ping.service.patch BuildRequires: fdupes BuildRequires: python3-devel >= 3.6 BuildRequires: python3-distro diff --git a/harden_2ping.service.patch b/harden_2ping.service.patch new file mode 100644 index 0000000..c9e1c5c --- /dev/null +++ b/harden_2ping.service.patch @@ -0,0 +1,16 @@ +Index: 2ping-4.5.1/2ping.service +=================================================================== +--- 2ping-4.5.1.orig/2ping.service ++++ 2ping-4.5.1/2ping.service +@@ -30,6 +30,11 @@ RestrictAddressFamilies=AF_NETLINK AF_IN + RestrictNamespaces=yes + RestrictRealtime=yes + RestrictSUIDSGID=yes ++# added automatically, for details please see ++# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort ++ProtectHostname=true ++ProtectClock=true ++# end of automatic additions + User=nobody + + [Install]