File net-snmp-5.10.pre1-harden_snmpd.service.patch of Package net-snmp

diff -Nurp net-snmp-5.10.pre1.orig/dist/snmpd.service net-snmp-5.10.pre1/dist/snmpd.service
--- net-snmp-5.10.pre1.orig/dist/snmpd.service	2025-05-02 10:49:28.131190178 +0200
+++ net-snmp-5.10.pre1/dist/snmpd.service	2025-05-02 10:50:46.429424671 +0200
@@ -10,6 +10,15 @@ Description=Simple Network Management Pr
 After=network.target
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 # Type=notify is also supported. It should be set when snmpd.socket is not used.
 Type=simple
 ExecStart=/usr/sbin/snmpd -f
openSUSE Build Service is sponsored by