udisks2/harden_udisks2-zram-setup@.service.patch
Dominique Leuenberger 1e15db466a Accepting request 978242 from home:jsegitz:branches:systemdhardening:Base:System
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_udisks2-zram-setup@.service.patch
  * harden_udisks2.service.patch

OBS-URL: https://build.opensuse.org/request/show/978242
OBS-URL: https://build.opensuse.org/package/show/Base:System/udisks2?expand=0&rev=94
2022-06-09 07:36:20 +00:00

17 lines
619 B
Diff

Index: udisks-2.9.4/modules/zram/data/udisks2-zram-setup@.service.in
===================================================================
--- udisks-2.9.4.orig/modules/zram/data/udisks2-zram-setup@.service.in
+++ udisks-2.9.4/modules/zram/data/udisks2-zram-setup@.service.in
@@ -5,6 +5,11 @@ After=dev-%i.device
Requires=dev-%i.device
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+RestrictRealtime=true
+# end of automatic additions
Type=oneshot
RemainAfterExit=no
EnvironmentFile=-@zramconfdir@/%i