diff --git a/powerd.changes b/powerd.changes index 3c292c3..17d4a7a 100644 --- a/powerd.changes +++ b/powerd.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Oct 21 11:29:51 UTC 2021 - Dr. Werner Fink + +- Automatic systemd hardening effort by the security team. This has + not been tested. For details please see + https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort + ------------------------------------------------------------------- Wed Nov 25 15:04:45 UTC 2020 - Ludwig Nussel diff --git a/powerd.service b/powerd.service index 14d6846..3d10306 100644 --- a/powerd.service +++ b/powerd.service @@ -4,6 +4,17 @@ Documentation=man:powerd(8) ConditionPathExists=/etc/powerd.conf [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking PIDFile=/var/run/powerd.pid ExecStart=/sbin/powerd