File harden_deepin-login-sound.service.patch of Package deepin-api

Overview Repositories Revisions Requests Users Attributes Meta

File harden_deepin-login-sound.service.patch of Package deepin-api

diff -Nur dde-api-6.0.6/misc/systemd/system/deepin-login-sound.service dde-api-6.0.6-new/misc/systemd/system/deepin-login-sound.service
--- dde-api-6.0.6/misc/systemd/system/deepin-login-sound.service	2023-03-31 18:04:31.000000000 +0800
+++ dde-api-6.0.6-new/misc/systemd/system/deepin-login-sound.service	2023-04-27 20:19:52.309967474 +0800
@@ -4,6 +4,19 @@
 After=dbus.service lightdm.service
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=oneshot
 ExecStart=/usr/bin/dbus-send --system --print-reply --dest=org.deepin.dde.SoundThemePlayer1 /org/deepin/dde/SoundThemePlayer1 org.deepin.dde.SoundThemePlayer1.PlaySoundDesktopLogin
 RemainAfterExit=yes

Places

File harden_deepin-login-sound.service.patch of Package deepin-api

Places