diff --git a/pure-ftpd.changes b/pure-ftpd.changes index b6f29ce..1cd77a5 100644 --- a/pure-ftpd.changes +++ b/pure-ftpd.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Oct 20 14:40:45 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * pure-ftpd.service + ------------------------------------------------------------------- Mon May 3 05:30:57 UTC 2021 - Luigi Baldoni diff --git a/pure-ftpd.service b/pure-ftpd.service index 101b9fd..dcb610f 100644 --- a/pure-ftpd.service +++ b/pure-ftpd.service @@ -3,6 +3,18 @@ Description=Pure-FTPd FTP server After=syslog.target network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStart=/usr/sbin/pure-ftpd /etc/pure-ftpd/pure-ftpd.conf [Install]