diff --git a/acpid.changes b/acpid.changes index b79755f..5e7bf26 100644 --- a/acpid.changes +++ b/acpid.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue Jul 27 14:19:54 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s). Modified: + * acpid.service + ------------------------------------------------------------------- Mon Jan 4 13:11:47 UTC 2021 - Dirk Müller diff --git a/acpid.service b/acpid.service index 407bb9d..5695f24 100644 --- a/acpid.service +++ b/acpid.service @@ -2,6 +2,14 @@ Description=ACPI Event Daemon [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectClock=true +ProtectKernelLogs=true +ProtectControlGroups=true ExecStart=/usr/sbin/acpid -n -f ExecReload=/bin/kill -s HUP $MAINPID