File harden_logwatch_dmeventd.service.patch of Package logwatch
Index: logwatch-7.8/Logwatch_Setup_Files/logwatch_dmeventd.service
===================================================================
--- logwatch-7.8.orig/Logwatch_Setup_Files/logwatch_dmeventd.service
+++ logwatch-7.8/Logwatch_Setup_Files/logwatch_dmeventd.service
@@ -22,6 +22,18 @@ Description=Log analyzer and reporter, s
Documentation=man:logwatch(8) man:logwatch.conf(5)
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=read-only
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
User=root
Type=oneshot
ExecStart=/usr/sbin/logwatch --service dmeventd