pcsc-lite/harden_pcscd.service.patch

23 lines
753 B
Diff
Raw Permalink Normal View History

Index: pcsc-lite-1.9.4/etc/pcscd.service.in
===================================================================
--- pcsc-lite-1.9.4.orig/etc/pcscd.service.in
+++ pcsc-lite-1.9.4/etc/pcscd.service.in
@@ -4,6 +4,17 @@ Requires=pcscd.socket
Documentation=man:pcscd(8)
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Environment="PCSCD_OPTIONS="
EnvironmentFile=-/etc/sysconfig/pcscd
ExecStart=@sbindir_exp@/pcscd --foreground $PCSCD_OPTIONS