diff --git a/pommed.changes b/pommed.changes index 2c24fb9..1c836c2 100644 --- a/pommed.changes +++ b/pommed.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue Oct 19 10:47:55 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * pommed.service + ------------------------------------------------------------------- Tue Sep 22 01:15:46 CEST 2020 - ro@suse.de diff --git a/pommed.service b/pommed.service index 5897035..6ca0279 100644 --- a/pommed.service +++ b/pommed.service @@ -3,6 +3,17 @@ Description="keyboard lights and more for apple laptops" After=dbus.service [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=dbus BusName=org.pommed ExecStart=/usr/sbin/pommed -f