File harden_laptop-mode.service.patch of Package laptop-mode-tools

Index: laptop-mode-tools_1.74/etc/systemd/laptop-mode.service
===================================================================
--- laptop-mode-tools_1.74.orig/etc/systemd/laptop-mode.service
+++ laptop-mode-tools_1.74/etc/systemd/laptop-mode.service
@@ -4,6 +4,16 @@ Documentation=man:laptop_mode(8) man:lap
 Documentation=http://github.com/rickysarraf/laptop-mode-tools
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 Type=oneshot
 RemainAfterExit=yes
 ExecStartPre=/bin/rm -f /var/run/laptop-mode-tools/enabled
openSUSE Build Service is sponsored by