Stanislav Brabec
9999ad67b6
* See NEWS and ChangeLog files for full details - Rebase smartd_service_dont_quit.patch - Rebase harden_smartd.service.patch OBS-URL: https://build.opensuse.org/package/show/Base:System/smartmontools?expand=0&rev=142
21 lines
760 B
Diff
21 lines
760 B
Diff
diff -Pdpru smartmontools-7.5.orig/smartd.service.in smartmontools-7.5/smartd.service.in
|
|
--- smartmontools-7.5.orig/smartd.service.in 2025-01-24 15:28:39.000000000 +0100
|
|
+++ smartmontools-7.5/smartd.service.in 2025-05-01 12:28:15.062462785 +0200
|
|
@@ -7,6 +7,16 @@ Documentation=man:smartd(8) man:smartd.c
|
|
ConditionVirtualization=no
|
|
|
|
[Service]
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectSystem=full
|
|
+ProtectHome=true
|
|
+ProtectHostname=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+RestrictRealtime=true
|
|
+# end of automatic additions
|
|
Type=notify
|
|
Environment=smartd_opts=''
|
|
EnvironmentFile=-/usr/local/etc/sysconfig/smartmontools
|