diff --git a/nslcd.service b/nslcd.service index d5c3092..31e3a9a 100644 --- a/nslcd.service +++ b/nslcd.service @@ -3,6 +3,19 @@ Description=Naming services LDAP client daemon. After=syslog.target network.target named.service dirsrv.target slapd.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=forking PIDFile=/var/run/nslcd/nslcd.pid ExecStart=/usr/sbin/nslcd diff --git a/nss-pam-ldapd.changes b/nss-pam-ldapd.changes index 9344bad..1ccddb4 100644 --- a/nss-pam-ldapd.changes +++ b/nss-pam-ldapd.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Mon Oct 11 09:32:04 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * nslcd.service + ------------------------------------------------------------------- Tue Sep 28 13:53:39 UTC 2021 - Dominique Leuenberger