Accepting request 926719 from home:jsegitz:branches:systemdhardening:openSUSE:Factory
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/926719 OBS-URL: https://build.opensuse.org/package/show/Base:System/sysvinit?expand=0&rev=253
This commit is contained in:
parent
d88d563fb9
commit
764735c3ed
@ -4,6 +4,17 @@ Documentation=man:powerd(8)
|
||||
ConditionPathExists=/etc/powerd.conf
|
||||
|
||||
[Service]
|
||||
# added automatically, for details please see
|
||||
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||
ProtectSystem=full
|
||||
ProtectHome=true
|
||||
ProtectHostname=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelLogs=true
|
||||
ProtectControlGroups=true
|
||||
RestrictRealtime=true
|
||||
# end of automatic additions
|
||||
Type=forking
|
||||
PIDFile=/var/run/powerd.pid
|
||||
ExecStart=/sbin/powerd
|
||||
|
Loading…
x
Reference in New Issue
Block a user