diff --git a/orthanc.changes b/orthanc.changes index d9e4251..c231496 100644 --- a/orthanc.changes +++ b/orthanc.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Oct 13 13:27:12 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * orthanc.service + ------------------------------------------------------------------- Sun Sep 26 20:02:08 UTC 2021 - Axel Braun diff --git a/orthanc.service b/orthanc.service index d5b9702..7120db9 100644 --- a/orthanc.service +++ b/orthanc.service @@ -14,6 +14,12 @@ ProtectControlGroups=true MountFlags=private NoNewPrivileges=true PrivateDevices=true +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectHostname=true +ProtectKernelLogs=true +RestrictRealtime=true +# end of automatic additions MemoryDenyWriteExecute=true Type=simple