File harden_influxdb.service.patch of Package influxdb
Index: influxdb-1.8.6/scripts/influxdb.service =================================================================== --- influxdb-1.8.6.orig/scripts/influxdb.service +++ influxdb-1.8.6/scripts/influxdb.service @@ -6,6 +6,19 @@ Documentation=https://docs.influxdata.co After=network-online.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions User=influxdb Group=influxdb LimitNOFILE=65536