File harden_frr.service.patch of Package frr

Overview Repositories Revisions Requests Users Attributes Meta

File harden_frr.service.patch of Package frr (Revision b1b90bf177c9fba09257665b0855b9e9)

Currently displaying revision b1b90bf177c9fba09257665b0855b9e9 , Show latest

Index: frr-frr-8.0.1/tools/frr.service.in
===================================================================
--- frr-frr-8.0.1.orig/tools/frr.service.in
+++ frr-frr-8.0.1/tools/frr.service.in
@@ -7,6 +7,15 @@ Before=network.target
 OnFailure=heartbeat-failed@%n
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Nice=-5
 Type=forking
 NotifyAccess=all
Index: frr-frr-8.0.1/tools/frr@.service.in
===================================================================
--- frr-frr-8.0.1.orig/tools/frr@.service.in
+++ frr-frr-8.0.1/tools/frr@.service.in
@@ -7,6 +7,15 @@ Before=network.target
 OnFailure=heartbeat-failed@%n
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Nice=-5
 Type=forking
 NotifyAccess=all

Places

File harden_frr.service.patch of Package frr (Revision b1b90bf177c9fba09257665b0855b9e9)

Places