File harden_frr.service.patch of Package frr

Overview Repositories Revisions Requests Users Attributes Meta

File harden_frr.service.patch of Package frr (Revision 2f09757a02a2dc4615eaaa33eb3e02f6)

Currently displaying revision 2f09757a02a2dc4615eaaa33eb3e02f6 , Show latest

Index: frr-frr-8.0.1/tools/frr.service.in
===================================================================
--- frr-frr-8.0.1.orig/tools/frr.service.in
+++ frr-frr-8.0.1/tools/frr.service.in
@@ -7,6 +7,15 @@ Before=network.target
 OnFailure=heartbeat-failed@%n
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Nice=-5
 Type=forking
 NotifyAccess=all
Index: frr-frr-8.0.1/tools/frr@.service.in
===================================================================
--- frr-frr-8.0.1.orig/tools/frr@.service.in
+++ frr-frr-8.0.1/tools/frr@.service.in
@@ -7,6 +7,15 @@ Before=network.target
 OnFailure=heartbeat-failed@%n
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Nice=-5
 Type=forking
 NotifyAccess=all

Places

File harden_frr.service.patch of Package frr (Revision 2f09757a02a2dc4615eaaa33eb3e02f6)

Places