Accepting request 926723 from home:jsegitz:branches:systemdhardening:server:monitoring
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/926723 OBS-URL: https://build.opensuse.org/package/show/server:monitoring/pmacct?expand=0&rev=105
This commit is contained in:
committed by
Git OBS Bridge
parent
e852c405cd
commit
c0015be8a4
@@ -3,6 +3,17 @@ Description=promiscuous mode accounting daemon
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
# added automatically, for details please see
|
||||
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||
ProtectSystem=full
|
||||
ProtectHome=true
|
||||
ProtectHostname=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelLogs=true
|
||||
ProtectControlGroups=true
|
||||
RestrictRealtime=true
|
||||
# end of automatic additions
|
||||
Type=forking
|
||||
EnvironmentFile=-/etc/sysconfig/pmacctd
|
||||
ExecStart=/usr/sbin/pmacctd -f ${PMACCTD_CONF} $DAEMON_OPTS
|
||||
|
Reference in New Issue
Block a user