File thinkfan-1.3.0-systemd.patch of Package thinkfan

Index: thinkfan-1.3.0/rcscripts/systemd/thinkfan.service.cmake
===================================================================
--- thinkfan-1.3.0.orig/rcscripts/systemd/thinkfan.service.cmake
+++ thinkfan-1.3.0/rcscripts/systemd/thinkfan.service.cmake
@@ -4,10 +4,17 @@ After=sysinit.target
 After=systemd-modules-load.service
 
 [Service]
+EnvironmentFile=-/etc/sysconfig/thinkfan
 Type=forking
 ExecStart=@CMAKE_INSTALL_PREFIX@/sbin/thinkfan $THINKFAN_ARGS
 PIDFile=/run/thinkfan.pid
 ExecReload=/bin/kill -HUP $MAINPID
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+# end of automatic additions
 
 [Install]
 WantedBy=multi-user.target
Index: thinkfan-1.3.0/rcscripts/systemd/thinkfan-sleep.service
===================================================================
--- thinkfan-1.3.0.orig/rcscripts/systemd/thinkfan-sleep.service
+++ thinkfan-1.3.0/rcscripts/systemd/thinkfan-sleep.service
@@ -7,6 +7,16 @@ Type=oneshot
 ExecStart=/usr/bin/pkill -x -winch thinkfan
 # Hack: Since the signal handler races with the sleep, we need to delay a bit
 ExecStart=/usr/bin/sleep 1
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 
 [Install]
 WantedBy=sleep.target
Index: thinkfan-1.3.0/rcscripts/systemd/thinkfan-wakeup.service
===================================================================
--- thinkfan-1.3.0.orig/rcscripts/systemd/thinkfan-wakeup.service
+++ thinkfan-1.3.0/rcscripts/systemd/thinkfan-wakeup.service
@@ -9,6 +9,16 @@ After=hibernate.target
 [Service]
 Type=oneshot
 ExecStart=/usr/bin/pkill -x -usr2 thinkfan
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 
 [Install]
 WantedBy=sleep.target