diff --git a/bird.changes b/bird.changes index ea43b9d..81e1f71 100644 --- a/bird.changes +++ b/bird.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Aug 25 08:05:28 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s). Modified: + * bird.service + ------------------------------------------------------------------- Mon Mar 22 09:12:19 UTC 2021 - Martin Hauke diff --git a/bird.service b/bird.service index 3259d15..5359f55 100644 --- a/bird.service +++ b/bird.service @@ -6,6 +6,15 @@ After=network.target ConditionFileIsExecutable=/usr/sbin/bird [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectClock=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=simple ExecStartPre=/usr/sbin/bird -p -u bird -g bird ExecStart=/usr/sbin/bird -u bird -g bird -f -P /run/bird/bird.pid $BIRD_OPTIONS