Accepting request 926719 from home:jsegitz:branches:systemdhardening:openSUSE:Factory
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/926719 OBS-URL: https://build.opensuse.org/package/show/Base:System/sysvinit?expand=0&rev=253
This commit is contained in:
parent
d88d563fb9
commit
764735c3ed
@ -4,6 +4,17 @@ Documentation=man:powerd(8)
|
|||||||
ConditionPathExists=/etc/powerd.conf
|
ConditionPathExists=/etc/powerd.conf
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
|
# added automatically, for details please see
|
||||||
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||||
|
ProtectSystem=full
|
||||||
|
ProtectHome=true
|
||||||
|
ProtectHostname=true
|
||||||
|
ProtectKernelTunables=true
|
||||||
|
ProtectKernelModules=true
|
||||||
|
ProtectKernelLogs=true
|
||||||
|
ProtectControlGroups=true
|
||||||
|
RestrictRealtime=true
|
||||||
|
# end of automatic additions
|
||||||
Type=forking
|
Type=forking
|
||||||
PIDFile=/var/run/powerd.pid
|
PIDFile=/var/run/powerd.pid
|
||||||
ExecStart=/sbin/powerd
|
ExecStart=/sbin/powerd
|
||||||
|
Loading…
x
Reference in New Issue
Block a user