File harden_ofono.service.patch of Package ofono
Index: ofono-1.33/src/ofono.service.in =================================================================== --- ofono-1.33.orig/src/ofono.service.in +++ ofono-1.33/src/ofono.service.in @@ -3,6 +3,19 @@ Description=Telephony service After=syslog.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=dbus BusName=org.ofono ExecStart=@prefix@/sbin/ofonod -n