diff --git a/dictd.changes b/dictd.changes index bcc8dec..b53db23 100644 --- a/dictd.changes +++ b/dictd.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Mon Sep 13 13:57:00 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * dictd.service + ------------------------------------------------------------------- Mon Mar 30 12:37:41 UTC 2020 - Matej Cepl diff --git a/dictd.service b/dictd.service index ae65a5d..739f801 100644 --- a/dictd.service +++ b/dictd.service @@ -3,6 +3,19 @@ Description=Dictd Dictionary Server Daemon After=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking ExecStart=/usr/sbin/dictd --listen-to 127.0.0.1