nut/harden_nut-driver.service.patch

22 lines
832 B
Diff

diff -purN a/scripts/systemd/nut-driver@.service.in b/scripts/systemd/nut-driver@.service.in
--- a/scripts/systemd/nut-driver@.service.in 2023-10-07 16:06:44.000000000 +0200
+++ b/scripts/systemd/nut-driver@.service.in 2023-11-03 19:46:30.856267504 +0100
@@ -46,6 +46,17 @@ PartOf=nut-driver.target
# Finally note that "nut-driver-enumerator.service" should take care of this.
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Environment=NUT_IGNORE_NOWAIT=true
EnvironmentFile=-@CONFPATH@/nut.conf
SyslogIdentifier=%N