forked from pool/sysstat
David Anes
a7536043f1
lockfile. Using lockfile would require additional SELinux permissions. Require util-linux instead of procmail for this (bsc#1228246) OBS-URL: https://build.opensuse.org/package/show/Base:System/sysstat?expand=0&rev=153
23 lines
702 B
Diff
23 lines
702 B
Diff
Index: sysstat-12.4.3/sysstat.service.in
|
|
===================================================================
|
|
--- sysstat-12.4.3.orig/sysstat.service.in
|
|
+++ sysstat-12.4.3/sysstat.service.in
|
|
@@ -10,6 +10,17 @@ Description=Resets System Activity Logs
|
|
After=remote-fs.target local-fs.target
|
|
|
|
[Service]
|
|
+# added automatically, for details please see
|
|
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
+ProtectSystem=full
|
|
+ProtectHome=true
|
|
+ProtectHostname=true
|
|
+ProtectKernelTunables=true
|
|
+ProtectKernelModules=true
|
|
+ProtectKernelLogs=true
|
|
+ProtectControlGroups=true
|
|
+RestrictRealtime=true
|
|
+# end of automatic additions
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
User=@CRON_OWNER@
|