2021-09-23 07:10:34 +00:00
|
|
|
Index: iputils-20210722/systemd/rdisc.service.in
|
|
|
|
|
===================================================================
|
|
|
|
|
--- iputils-20210722.orig/systemd/rdisc.service.in
|
|
|
|
|
+++ iputils-20210722/systemd/rdisc.service.in
|
2021-10-15 14:18:45 +00:00
|
|
|
@@ -20,6 +20,11 @@ ProtectKernelModules=yes
|
2021-09-23 07:10:34 +00:00
|
|
|
MemoryDenyWriteExecute=yes
|
|
|
|
|
RestrictRealtime=yes
|
|
|
|
|
RestrictNamespaces=yes
|
|
|
|
|
+# added automatically, for details please see
|
|
|
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
|
|
|
+ProtectHostname=true
|
|
|
|
|
+ProtectKernelLogs=true
|
|
|
|
|
+# end of automatic additions
|
|
|
|
|
SystemCallArchitectures=native
|
|
|
|
|
LockPersonality=yes
|
|
|
|
|
NoNewPrivileges=yes
|
