File harden_logwatch_dmeventd.service.patch of Package logwatch
Index: logwatch-7.8/Logwatch_Setup_Files/logwatch_dmeventd.service =================================================================== --- logwatch-7.8.orig/Logwatch_Setup_Files/logwatch_dmeventd.service +++ logwatch-7.8/Logwatch_Setup_Files/logwatch_dmeventd.service @@ -22,6 +22,18 @@ Description=Log analyzer and reporter, s Documentation=man:logwatch(8) man:logwatch.conf(5) [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=read-only +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions User=root Type=oneshot ExecStart=/usr/sbin/logwatch --service dmeventd