File harden_dde-filemanager-daemon.service.patch of Package deepin-file-manager

Overview Repositories Revisions Requests Users Attributes Meta

File harden_dde-filemanager-daemon.service.patch of Package deepin-file-manager (Revision 46efd911cb1d7b6d0c932db19f8dcdf4)

Currently displaying revision 46efd911cb1d7b6d0c932db19f8dcdf4 , Show latest

diff -Nur dde-file-manager-6.0.40/src/apps/dde-file-manager-daemon/dbusservice/dde-filemanager-daemon.service dde-file-manager-6.0.40-new/src/apps/dde-file-manager-daemon/dbusservice/dde-filemanager-daemon.service
--- dde-file-manager-6.0.40/src/apps/dde-file-manager-daemon/dbusservice/dde-filemanager-daemon.service	2024-01-18 16:26:49.000000000 +0800
+++ dde-file-manager-6.0.40-new/src/apps/dde-file-manager-daemon/dbusservice/dde-filemanager-daemon.service	2024-02-22 21:09:20.654936935 +0800
@@ -3,6 +3,17 @@
 After=local-fs.target udisks2.service usec-boot-unlock.service
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=dbus
 BusName=com.deepin.filemanager.daemon
 ExecStart=/usr/bin/dde-file-manager-daemon

Places

File harden_dde-filemanager-daemon.service.patch of Package deepin-file-manager (Revision 46efd911cb1d7b6d0c932db19f8dcdf4)

Places