udisks2/harden_udisks2.service.patch

Index: udisks-2.9.4/data/udisks2.service.in
===================================================================
--- udisks-2.9.4.orig/data/udisks2.service.in
+++ udisks-2.9.4/data/udisks2.service.in
@@ -3,6 +3,11 @@ Description=Disk Manager
 Documentation=man:udisks(8)
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=dbus
 BusName=org.freedesktop.UDisks2
 ExecStart=@udisksdprivdir@/udisksd
Accepting request 978242 from home:jsegitz:branches:systemdhardening:Base:System - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_udisks2-zram-setup@.service.patch * harden_udisks2.service.patch OBS-URL: https://build.opensuse.org/request/show/978242 OBS-URL: https://build.opensuse.org/package/show/Base:System/udisks2?expand=0&rev=94 2022-06-09 09:36:20 +02:00			`Index: udisks-2.9.4/data/udisks2.service.in`
			`===================================================================`
			`--- udisks-2.9.4.orig/data/udisks2.service.in`
			`+++ udisks-2.9.4/data/udisks2.service.in`
			`@@ -3,6 +3,11 @@ Description=Disk Manager`
			`Documentation=man:udisks(8)`

			`[Service]`
			`+# added automatically, for details please see`
			`+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort`
			`+ProtectHostname=true`
			`+RestrictRealtime=true`
			`+# end of automatic additions`
			`Type=dbus`
			`BusName=org.freedesktop.UDisks2`
			`ExecStart=@udisksdprivdir@/udisksd`