2021-11-10 20:37:20 +00:00
|
|
|
Index: haveged-1.9.14/contrib/Fedora/haveged.service
|
|
|
|
===================================================================
|
|
|
|
--- haveged-1.9.14.orig/contrib/Fedora/haveged.service
|
|
|
|
+++ haveged-1.9.14/contrib/Fedora/haveged.service
|
2021-11-22 08:56:09 +00:00
|
|
|
@@ -24,6 +24,11 @@ ProtectKernelLogs=true
|
2021-11-10 20:37:20 +00:00
|
|
|
ProtectKernelModules=true
|
|
|
|
RestrictNamespaces=true
|
|
|
|
RestrictRealtime=true
|
|
|
|
+# added automatically, for details please see
|
|
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
|
|
+ProtectClock=true
|
|
|
|
+ProtectControlGroups=true
|
|
|
|
+# end of automatic additions
|
|
|
|
|
|
|
|
LockPersonality=true
|
|
|
|
MemoryDenyWriteExecute=true
|