Index: net-snmp-5.9/dist/snmpd.service =================================================================== --- net-snmp-5.9.orig/dist/snmpd.service +++ net-snmp-5.9/dist/snmpd.service @@ -10,6 +10,16 @@ Description=Simple Network Management Pr After=syslog.target network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions # Type=notify is also supported. It should be set when snmpd.socket is not used. Type=simple ExecStart=/usr/sbin/snmpd -f