File net-snmp-5.10.pre1-harden_snmptrapd.service.patch of Package net-snmp
diff -Nurp net-snmp-5.10.pre1.orig/dist/snmptrapd.service net-snmp-5.10.pre1/dist/snmptrapd.service --- net-snmp-5.10.pre1.orig/dist/snmptrapd.service 2025-05-02 10:49:28.131190178 +0200 +++ net-snmp-5.10.pre1/dist/snmptrapd.service 2025-05-02 10:52:42.356733042 +0200 @@ -7,6 +7,15 @@ Description=Simple Network Management Pr After=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions # Type=notify is also supported. It should be set when snmptrapd.socket is not # used. Type=simple




