diff --git a/ser2net.changes b/ser2net.changes index d4d3e27..498f7f0 100644 --- a/ser2net.changes +++ b/ser2net.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue Nov 16 15:53:19 UTC 2021 - Johannes Segitz + +- Added hardening to systemd service(s) (bsc#1181400). Modified: + * ser2net.service + ------------------------------------------------------------------- Sat Feb 6 21:28:46 UTC 2021 - Martin Hauke diff --git a/ser2net.service b/ser2net.service index 3021fb1..7dc8866 100644 --- a/ser2net.service +++ b/ser2net.service @@ -3,6 +3,17 @@ Description=Proxy that allows tcp connections to serial ports After=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStart=/usr/sbin/ser2net -n [Install]