File harden_logwatch_dmeventd.service.patch of Package logwatch

Index: logwatch-7.8/Logwatch_Setup_Files/logwatch_dmeventd.service
===================================================================
--- logwatch-7.8.orig/Logwatch_Setup_Files/logwatch_dmeventd.service
+++ logwatch-7.8/Logwatch_Setup_Files/logwatch_dmeventd.service
@@ -22,6 +22,18 @@ Description=Log analyzer and reporter, s
 Documentation=man:logwatch(8) man:logwatch.conf(5)
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=read-only
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
 User=root
 Type=oneshot
 ExecStart=/usr/sbin/logwatch --service dmeventd
openSUSE Build Service is sponsored by