diff --git a/powertop.changes b/powertop.changes index 8ab9f8a..5590d88 100644 --- a/powertop.changes +++ b/powertop.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Thu Nov 11 09:41:32 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * powertop.service + ------------------------------------------------------------------- Sun Jun 6 13:14:31 UTC 2021 - Dirk Müller diff --git a/powertop.service b/powertop.service index 4ac8f1a..9df22db 100644 --- a/powertop.service +++ b/powertop.service @@ -2,6 +2,18 @@ Description=Extend the battery life of laptop [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=oneshot ExecStart=/usr/sbin/powertop --auto-tune