83784f207b
- Drop ProtectClock hardening, can cause issues if other device acceess is needed OBS-URL: https://build.opensuse.org/request/show/925462 OBS-URL: https://build.opensuse.org/package/show/network:utilities/iputils?expand=0&rev=98
17 lines
609 B
Diff
17 lines
609 B
Diff
Index: iputils-20210722/systemd/rdisc.service.in
|
|
===================================================================
|
|
--- iputils-20210722.orig/systemd/rdisc.service.in
|
|
+++ iputils-20210722/systemd/rdisc.service.in
|
|
@@ -20,6 +20,11 @@ ProtectKernelModules=yes
|
|
MemoryDenyWriteExecute=yes
|
|
RestrictRealtime=yes
|
|
RestrictNamespaces=yes
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectHostname=true
|
|
+ProtectKernelLogs=true
|
|
+# end of automatic additions
|
|
SystemCallArchitectures=native
|
|
LockPersonality=yes
|
|
NoNewPrivileges=yes
|