e2fsprogs/harden_e2scrub_fail@.service.patch

Index: e2fsprogs-1.46.3/scrub/e2scrub_fail@.service.in
===================================================================
--- e2fsprogs-1.46.3.orig/scrub/e2scrub_fail@.service.in
+++ e2fsprogs-1.46.3/scrub/e2scrub_fail@.service.in
@@ -3,6 +3,17 @@ Description=Online ext4 Metadata Check F
 Documentation=man:e2scrub(8)
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=oneshot
 ExecStart=@pkglibdir@/e2scrub_fail "%I"
 User=mail
Accepting request 918932 from home:jsegitz:branches:systemdhardening:filesystems Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/918932 OBS-URL: https://build.opensuse.org/package/show/filesystems/e2fsprogs?expand=0&rev=142 2021-09-15 11:02:50 +02:00			`Index: e2fsprogs-1.46.3/scrub/e2scrub_fail@.service.in`
			`===================================================================`
			`--- e2fsprogs-1.46.3.orig/scrub/e2scrub_fail@.service.in`
			`+++ e2fsprogs-1.46.3/scrub/e2scrub_fail@.service.in`
Accepting request 925452 from home:jsegitz:branches:systemdhardening_protectclock - Drop ProtectClock hardening, can cause issues if other device acceess is needed OBS-URL: https://build.opensuse.org/request/show/925452 OBS-URL: https://build.opensuse.org/package/show/filesystems/e2fsprogs?expand=0&rev=145 2021-10-16 11:37:28 +02:00			`@@ -3,6 +3,17 @@ Description=Online ext4 Metadata Check F`
Accepting request 918932 from home:jsegitz:branches:systemdhardening:filesystems Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/918932 OBS-URL: https://build.opensuse.org/package/show/filesystems/e2fsprogs?expand=0&rev=142 2021-09-15 11:02:50 +02:00			`Documentation=man:e2scrub(8)`

			`[Service]`
			`+# added automatically, for details please see`
			`+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort`
			`+ProtectSystem=full`
			`+ProtectHome=true`
			`+ProtectHostname=true`
			`+ProtectKernelTunables=true`
			`+ProtectKernelModules=true`
			`+ProtectKernelLogs=true`
			`+ProtectControlGroups=true`
			`+RestrictRealtime=true`
			`+# end of automatic additions`
			`Type=oneshot`
			`ExecStart=@pkglibdir@/e2scrub_fail "%I"`
			`User=mail`