File harden_sslh.service.patch of Package sslh
Index: sslh-v1.22c/scripts/systemd.sslh.service
===================================================================
--- sslh-v1.22c.orig/scripts/systemd.sslh.service
+++ sslh-v1.22c/scripts/systemd.sslh.service
@@ -20,6 +20,12 @@ MountFlags=private
NoNewPrivileges=true
PrivateDevices=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+ProtectKernelLogs=true
+RestrictRealtime=true
+# end of automatic additions
MemoryDenyWriteExecute=true
DynamicUser=true