From: Vincent Bernat <vincent@bernat.im>
Date: Thu, 13 Jul 2017 06:51:13 +0000 (+0200)
Subject: daemon: enable recent systemd directive by default
X-Git-Tag: 0.9.8~10
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8733a3f7207d083c77060ab597edf1018309f6f6;p=thirdparty%2Flldpd.git

daemon: enable recent systemd directive by default

This will generate a warning for some users, but that should be
sustainable.
---

diff --git a/src/daemon/lldpd.service.in b/src/daemon/lldpd.service.in
index a28261c5..fdb7338f 100644
--- a/src/daemon/lldpd.service.in
+++ b/src/daemon/lldpd.service.in
@@ -13,14 +13,12 @@ ExecStartPre=@mkdir_p@ @PRIVSEP_CHROOT@
 ExecStart=@sbindir@/lldpd $DAEMON_ARGS $LLDPD_OPTIONS
 Restart=on-failure
 PrivateTmp=yes
-# systemd >= 214
-#ProtectHome=yes
-#ProtectSystem=yes
-# systemd >= 232
-#ProtectSystem=full
-#ProtectKernelTunables=yes
-#ProtectControlGroups=yes
-#ProtectKernelModules=yes
+ProtectHome=yes
+ProtectSystem=yes
+ProtectSystem=full
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+ProtectKernelModules=yes
 
 [Install]
 WantedBy=multi-user.target