File harden_ntp-wait.service.patch of Package ntpsec
Index: ntpsec-1.2.1/etc/ntp-wait.service
===================================================================
--- ntpsec-1.2.1.orig/etc/ntp-wait.service
+++ ntpsec-1.2.1/etc/ntp-wait.service
@@ -7,6 +7,16 @@ Conflicts=systemd-timesyncd.service
ConditionCapability=CAP_SYS_TIME
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+# end of automatic additions
Type=oneshot
ExecStart=@BINDIR@/ntpwait -s 1 -n 30000
RemainAfterExit=yes