Index: dde-daemon-5.13.36/misc/systemd/services/deepin-accounts-daemon.service =================================================================== --- dde-daemon-5.13.36.orig/misc/systemd/services/deepin-accounts-daemon.service +++ dde-daemon-5.13.36/misc/systemd/services/deepin-accounts-daemon.service @@ -8,6 +8,19 @@ After=nss-user-lookup.target lightdm.ser Wants=nss-user-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=dbus BusName=com.deepin.daemon.Accounts ExecStart=/usr/lib/deepin-daemon/dde-system-daemon