{"object_kind":"push","event_name":"push","before":"756e612858d4eb65de372d893c244066ada1f459","after":"b7d9625ae1e610e0bfb9b7fea1cfb4ea4df33fbe","ref":"refs/heads/main","ref_protected":false,"checkout_sha":"b7d9625ae1e610e0bfb9b7fea1cfb4ea4df33fbe","message":null,"user_id":1050,"user_name":"Beniamino Galvani","user_username":"bgalvani","user_email":"","user_avatar":"https://gitlab.freedesktop.org/uploads/-/system/user/avatar/1050/avatar.png","project_id":411,"project":{"id":411,"name":"NetworkManager","description":"NetworkManager — network management daemon","web_url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager","avatar_url":"https://gitlab.freedesktop.org/uploads/-/system/project/avatar/411/nm_logo.png","git_ssh_url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","git_http_url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git","namespace":"NetworkManager","visibility_level":20,"path_with_namespace":"NetworkManager/NetworkManager","default_branch":"main","ci_config_path":"","homepage":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager","url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","ssh_url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","http_url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git"},"commits":[{"id":"cb51c4475a3bea0bff6f7ab0a32b09a8b098d419","message":"data/NetworkManager.service: restrict the unit some more\n\nThis adds some low-hanging food to improve our score with \"systemd-analyze\nsecurity\" by one point:\n\nBefore:\n  → Overall exposure level for NetworkManager.service: 7.8 EXPOSED 🙁\n\nAfter:\n  → Overall exposure level for NetworkManager.service: 6.8 MEDIUM 😐\n\nNothing particularly impactful here: we still got DAC_OVERRIDE, we still\ncan insert loadable modules (as opposed to relying on autoload) and\nread user home directories. But there's a slight chance this may save\nour butts one day, who knows.\n\nhttps://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2062\n","title":"data/NetworkManager.service: restrict the unit some more","timestamp":"2026-02-27T08:44:10+00:00","url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/cb51c4475a3bea0bff6f7ab0a32b09a8b098d419","author":{"name":"Lubomir Rintel","email":"lkundrak@v3.sk"},"added":[],"modified":["data/NetworkManager.service.in"],"removed":[]},{"id":"b7d9625ae1e610e0bfb9b7fea1cfb4ea4df33fbe","message":"merge: branch 'lr/systemd-unit-lockdown'\n\ndata/NetworkManager.service: restrict the unit some more\n\nhttps://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2062","title":"merge: branch 'lr/systemd-unit-lockdown'","timestamp":"2026-02-27T08:46:04+00:00","url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/b7d9625ae1e610e0bfb9b7fea1cfb4ea4df33fbe","author":{"name":"Beniamino Galvani","email":"bgalvani@redhat.com"},"added":[],"modified":["data/NetworkManager.service.in"],"removed":[]}],"total_commits_count":2,"push_options":{},"repository":{"name":"NetworkManager","url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","description":"NetworkManager — network management daemon","homepage":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager","git_http_url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git","git_ssh_url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","visibility_level":20}}