File net-snmp-5.10.pre1-harden_snmpd.service.patch of Package net-snmp
diff -Nurp net-snmp-5.10.pre1.orig/dist/snmpd.service net-snmp-5.10.pre1/dist/snmpd.service --- net-snmp-5.10.pre1.orig/dist/snmpd.service 2025-05-02 10:49:28.131190178 +0200 +++ net-snmp-5.10.pre1/dist/snmpd.service 2025-05-02 10:50:46.429424671 +0200 @@ -10,6 +10,15 @@ Description=Simple Network Management Pr After=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions # Type=notify is also supported. It should be set when snmpd.socket is not used. Type=simple ExecStart=/usr/sbin/snmpd -f