harden_smartd.service.patch

diff -Pdpru smartmontools-7.5.orig/smartd.service.in smartmontools-7.5/smartd.service.in
--- smartmontools-7.5.orig/smartd.service.in	2025-01-24 15:28:39.000000000 +0100
+++ smartmontools-7.5/smartd.service.in	2025-05-01 12:28:15.062462785 +0200
@@ -7,6 +7,16 @@ Documentation=man:smartd(8) man:smartd.c
 ConditionVirtualization=no
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
 Type=notify
 Environment=smartd_opts=''
 EnvironmentFile=-/usr/local/etc/sysconfig/smartmontools
- Update to 7.5 * See NEWS and ChangeLog files for full details - Rebase smartd_service_dont_quit.patch - Rebase harden_smartd.service.patch OBS-URL: https://build.opensuse.org/package/show/Base:System/smartmontools?expand=0&rev=142 2025-05-03 17:26:52 +00:00			`diff -Pdpru smartmontools-7.5.orig/smartd.service.in smartmontools-7.5/smartd.service.in`
			`--- smartmontools-7.5.orig/smartd.service.in 2025-01-24 15:28:39.000000000 +0100`
			`+++ smartmontools-7.5/smartd.service.in 2025-05-01 12:28:15.062462785 +0200`
			`@@ -7,6 +7,16 @@ Documentation=man:smartd(8) man:smartd.c`
			`ConditionVirtualization=no`

			`[Service]`
			`+# added automatically, for details please see`
			`+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort`
			`+ProtectSystem=full`
			`+ProtectHome=true`
			`+ProtectHostname=true`
			`+ProtectKernelModules=true`
			`+ProtectKernelLogs=true`
			`+ProtectControlGroups=true`
			`+RestrictRealtime=true`
			`+# end of automatic additions`
			`Type=notify`
			`Environment=smartd_opts=''`
			`EnvironmentFile=-/usr/local/etc/sysconfig/smartmontools`