diff --git a/wrapsix.changes b/wrapsix.changes
index 7271432..0dbb79b 100644
--- a/wrapsix.changes
+++ b/wrapsix.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Jan  5 11:48:46 UTC 2022 - Johannes Segitz <jsegitz@suse.com>
+
+- Added hardening to systemd service(s) (bsc#1181400). Modified:
+  * wrapsix.service
+
 -------------------------------------------------------------------
 Thu Dec  6 21:06:36 UTC 2018 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/wrapsix.service b/wrapsix.service
index d2851d7..872b25e 100644
--- a/wrapsix.service
+++ b/wrapsix.service
@@ -4,6 +4,17 @@ After=syslog.target
 WantedBy=network.target
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=simple
 ExecStart=/usr/sbin/wrapsix /etc/wrapsix.conf