File harden_redfish-finder.service.patch of Package redfish-finder
Index: redfish-finder-0.4/redfish-finder.service =================================================================== --- redfish-finder-0.4.orig/redfish-finder.service +++ redfish-finder-0.4/redfish-finder.service @@ -3,6 +3,17 @@ Description=Redfish host api discovery s After=network.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=oneshot ExecStart=/usr/bin/redfish-finder ExecStop=/usr/bin/redfish-finder --shutdown