From 208686455da68e08bec9c0944f8df096a99846252da9a141023f8712754255eb Mon Sep 17 00:00:00 2001
From: Martin Hauke <mardnh@gmx.de>
Date: Fri, 27 Aug 2021 13:07:07 +0000
Subject: [PATCH] Accepting request 914360 from
 home:jsegitz:branches:systemdhardening:network

Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/914360
OBS-URL: https://build.opensuse.org/package/show/network/bird?expand=0&rev=19
---
 bird.changes | 6 ++++++
 bird.service | 9 +++++++++
 2 files changed, 15 insertions(+)

diff --git a/bird.changes b/bird.changes
index ea43b9d..81e1f71 100644
--- a/bird.changes
+++ b/bird.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Aug 25 08:05:28 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
+
+- Added hardening to systemd service(s). Modified:
+  * bird.service
+
 -------------------------------------------------------------------
 Mon Mar 22 09:12:19 UTC 2021 - Martin Hauke <mardnh@gmx.de>
 
diff --git a/bird.service b/bird.service
index 3259d15..5359f55 100644
--- a/bird.service
+++ b/bird.service
@@ -6,6 +6,15 @@ After=network.target
 ConditionFileIsExecutable=/usr/sbin/bird
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectClock=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=simple
 ExecStartPre=/usr/sbin/bird -p -u bird -g bird
 ExecStart=/usr/sbin/bird -u bird -g bird -f -P /run/bird/bird.pid $BIRD_OPTIONS