File harden_ntp-wait.service.patch of Package ntpsec
Index: ntpsec-1.2.1/etc/ntp-wait.service =================================================================== --- ntpsec-1.2.1.orig/etc/ntp-wait.service +++ ntpsec-1.2.1/etc/ntp-wait.service @@ -7,6 +7,16 @@ Conflicts=systemd-timesyncd.service ConditionCapability=CAP_SYS_TIME [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +# end of automatic additions Type=oneshot ExecStart=@BINDIR@/ntpwait -s 1 -n 30000 RemainAfterExit=yes