diff --git a/openslp.changes b/openslp.changes index 238ea7e..3694af5 100644 --- a/openslp.changes +++ b/openslp.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Oct 13 11:13:47 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * slpd.service + ------------------------------------------------------------------- Tue Mar 24 17:07:52 CET 2020 - mls@suse.de diff --git a/slpd.service b/slpd.service index 85800a8..40114ed 100644 --- a/slpd.service +++ b/slpd.service @@ -3,6 +3,19 @@ Description=OpenSLP daemon for the Service Location Protocol After=network.target nss-lookup.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=notify ExecStart=/usr/sbin/slpd -d ExecReload=/bin/kill -HUP $MAINPID