File harden_ping_exporter.service.patch of Package golang-github-czerwonk-ping_exporter
Index: golang-github-czerwonk-ping_exporter-1.1.4/dist/ping_exporter.service =================================================================== --- golang-github-czerwonk-ping_exporter-1.1.4.orig/dist/ping_exporter.service +++ golang-github-czerwonk-ping_exporter-1.1.4/dist/ping_exporter.service @@ -21,6 +21,10 @@ ProtectKernelModules=yes ProtectKernelTunables=true ProtectSystem=strict ProtectHome=true +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectKernelLogs=true +# end of automatic additions DevicePolicy=closed RestrictRealtime=yes MemoryDenyWriteExecute=yes