File harden_sblim-sfcb.service.patch of Package sblim-sfcb

Index: sblim-sfcb-1.4.9/sblim-sfcb.service.pre.in
===================================================================
--- sblim-sfcb-1.4.9.orig/sblim-sfcb.service.pre.in
+++ sblim-sfcb-1.4.9/sblim-sfcb.service.pre.in
@@ -3,6 +3,19 @@ Description=Small Footprint CIM Broker S
 After=syslog.target
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions 
 ExecStartPre=${exec_prefix}/share/sfcb/gen_ssl_certs.sh
 ExecStart=${exec_prefix}/sbin/sfcbd