File harden_smartd.service.patch of Package smartmontools
diff -Pdpru smartmontools-7.5.orig/smartd.service.in smartmontools-7.5/smartd.service.in
--- smartmontools-7.5.orig/smartd.service.in 2025-01-24 15:28:39.000000000 +0100
+++ smartmontools-7.5/smartd.service.in 2025-05-01 12:28:15.062462785 +0200
@@ -7,6 +7,16 @@ Documentation=man:smartd(8) man:smartd.c
ConditionVirtualization=no
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=notify
Environment=smartd_opts=''
EnvironmentFile=-/usr/local/etc/sysconfig/smartmontools