Index: haveged-1.9.14/contrib/Fedora/haveged.service =================================================================== --- haveged-1.9.14.orig/contrib/Fedora/haveged.service +++ haveged-1.9.14/contrib/Fedora/haveged.service @@ -24,6 +24,11 @@ ProtectKernelLogs=true ProtectKernelModules=true RestrictNamespaces=true RestrictRealtime=true +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectClock=true +ProtectControlGroups=true +# end of automatic additions LockPersonality=true MemoryDenyWriteExecute=true