File apache-trafficserver-harden-245.service.patch of Package apache-trafficserver

Index: trafficserver-9.1.0/rc/trafficserver.service.in
===================================================================
--- trafficserver-9.1.0.orig/rc/trafficserver.service.in
+++ trafficserver-9.1.0/rc/trafficserver.service.in
@@ -35,7 +35,14 @@ ExecReload=@exp_bindir@/traffic_ctl conf
 KillMode=process
 
 # Lock-down for the simplest use-case
-ProtectSystem=full
+DynamicUser=yes
+LogsDirectory=trafficserver
+StateDirectory=trafficserver
+RuntimeDirectory=trafficserver
+ProtectHostname=yes
+ProtectClock=yes
+ProtectKernelLogs=yes
+LockPersonality=yes
 ProtectHome=yes
 ProtectKernelTunables=yes
 ProtectKernelModules=yes