udisks2/harden_udisks2-zram-setup@.service.patch

Index: udisks-2.9.4/modules/zram/data/udisks2-zram-setup@.service.in
===================================================================
--- udisks-2.9.4.orig/modules/zram/data/udisks2-zram-setup@.service.in
+++ udisks-2.9.4/modules/zram/data/udisks2-zram-setup@.service.in
@@ -5,6 +5,11 @@ After=dev-%i.device
 Requires=dev-%i.device
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=oneshot
 RemainAfterExit=no
 EnvironmentFile=-@zramconfdir@/%i
Accepting request 978242 from home:jsegitz:branches:systemdhardening:Base:System - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_udisks2-zram-setup@.service.patch * harden_udisks2.service.patch OBS-URL: https://build.opensuse.org/request/show/978242 OBS-URL: https://build.opensuse.org/package/show/Base:System/udisks2?expand=0&rev=94 2022-06-09 09:36:20 +02:00			`Index: udisks-2.9.4/modules/zram/data/udisks2-zram-setup@.service.in`
			`===================================================================`
			`--- udisks-2.9.4.orig/modules/zram/data/udisks2-zram-setup@.service.in`
			`+++ udisks-2.9.4/modules/zram/data/udisks2-zram-setup@.service.in`
			`@@ -5,6 +5,11 @@ After=dev-%i.device`
			`Requires=dev-%i.device`

			`[Service]`
			`+# added automatically, for details please see`
			`+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort`
			`+ProtectHostname=true`
			`+RestrictRealtime=true`
			`+# end of automatic additions`
			`Type=oneshot`
			`RemainAfterExit=no`
			`EnvironmentFile=-@zramconfdir@/%i`