diff --git a/alsa-utils.changes b/alsa-utils.changes index a09b0a9..6769f06 100644 --- a/alsa-utils.changes +++ b/alsa-utils.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Jul 28 07:46:26 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s). Modified: + * sound-extra.service + ------------------------------------------------------------------- Mon Jun 14 15:04:57 CEST 2021 - tiwai@suse.de diff --git a/sound-extra.service b/sound-extra.service index 8b5299f..33e9629 100644 --- a/sound-extra.service +++ b/sound-extra.service @@ -4,5 +4,14 @@ After=alsa-restore.service ConditionPathExists=/proc/asound [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelLogs=true +ProtectControlGroups=true Type=oneshot ExecStart=/usr/lib/systemd/scripts/load-sound-modules.sh