File harden_veyon.service.patch of Package veyon
Index: veyon-4.7.0/service/veyon.service.in =================================================================== --- veyon-4.7.0.orig/service/veyon.service.in +++ veyon-4.7.0/service/veyon.service.in @@ -6,6 +6,17 @@ Requires=dbus.service systemd-logind.ser Documentation=man:veyon-service(1) [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStart=@CMAKE_INSTALL_PREFIX@/bin/veyon-service Type=simple Restart=always