diff --git a/ddclient.changes b/ddclient.changes index 52e5ae7..3205e55 100644 --- a/ddclient.changes +++ b/ddclient.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Sep 1 12:27:43 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s). Modified: + * ddclient.service + ------------------------------------------------------------------- Tue May 18 14:43:16 UTC 2021 - Josef Möllers diff --git a/ddclient.service b/ddclient.service index 5c7684f..28b5f16 100644 --- a/ddclient.service +++ b/ddclient.service @@ -3,6 +3,19 @@ Description=A Perl Client Used To Update Dynamic DNS After=network.target nss-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions User=ddclient Group=ddclient Type=forking