File harden_sslh.service.patch of Package sslh

Index: sslh-v1.22c/scripts/systemd.sslh.service
===================================================================
--- sslh-v1.22c.orig/scripts/systemd.sslh.service
+++ sslh-v1.22c/scripts/systemd.sslh.service
@@ -20,6 +20,12 @@ MountFlags=private
 NoNewPrivileges=true
 PrivateDevices=true
 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectHostname=true
+ProtectKernelLogs=true
+RestrictRealtime=true
+# end of automatic additions 
 MemoryDenyWriteExecute=true
 DynamicUser=true
 
openSUSE Build Service is sponsored by