File harden_razerd.service.patch of Package razercfg
Index: razercfg-0.42/razerd.service.template =================================================================== --- razercfg-0.42.orig/razerd.service.template +++ razercfg-0.42/razerd.service.template @@ -4,6 +4,17 @@ Requires=local-fs.target After=local-fs.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +ProtectHostname=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions ExecStart=@CMAKE_INSTALL_PREFIX@/bin/razerd -f [Install]