diff --git a/.files b/.files index 573a499..b52cc65 100644 Binary files a/.files and b/.files differ diff --git a/.rev b/.rev index 6df5c28..4bcc2ee 100644 --- a/.rev +++ b/.rev @@ -343,4 +343,12 @@ 685961 + + f5037dd7bb0299b0d1fa784cabc5ed5f + 6.6.4 + + dimstar_suse + + 925614 + diff --git a/acct.changes b/acct.changes index 456c2c9..5b18b06 100644 --- a/acct.changes +++ b/acct.changes @@ -1,4 +1,10 @@ ------------------------------------------------------------------- +Tue Jul 27 11:54:39 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s). Modified: + * acct.service + +------------------------------------------------------------------- Sun Mar 17 10:55:00 UTC 2019 - Jan Engelhardt - Reduce %systemd_requires to %systemd_ordering: %service_* diff --git a/acct.service b/acct.service index 3879099..1b6a511 100644 --- a/acct.service +++ b/acct.service @@ -3,6 +3,17 @@ Description=Process accounting Documentation=man:accton(8) [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true Type=oneshot RemainAfterExit=true ExecStartPre=/usr/bin/chmod 600 /var/log/account/pacct diff --git a/acct.spec b/acct.spec index 585ce06..956cde7 100644 --- a/acct.spec +++ b/acct.spec @@ -1,7 +1,7 @@ # # spec file for package acct # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ Release: 0 Summary: User-Specific Process Accounting License: GPL-2.0-or-later Group: System/Base -Url: https://www.gnu.org/software/acct/ +URL: https://www.gnu.org/software/acct/ Source: https://ftp.gnu.org/gnu/acct/%{name}-%{version}.tar.gz Source1: acct.service Source2: logrotate.acct