File harden_logd.service.patch of Package cluster-glue

Index: cluster-glue-1.0.12+v1.git.1622055853.1753f5e0/logd/logd.service.in
===================================================================
--- cluster-glue-1.0.12+v1.git.1622055853.1753f5e0.orig/logd/logd.service.in
+++ cluster-glue-1.0.12+v1.git.1622055853.1753f5e0/logd/logd.service.in
@@ -3,6 +3,19 @@ Description=ha_logd logging daemon
 Documentation=man:ha_logd(8)
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 ExecStart=@libdir@/@HB_PKG@/ha_logd -c @sysconfdir@/logd.cf
 ExecStartPre=/bin/rm -f @HA_VARRUNDIR@/logd.pid
 ExecStopPost=/bin/rm -f @HA_VARRUNDIR@/logd.pid
openSUSE Build Service is sponsored by