Add ProtectHome and RestrictRealtime to auditd.service

RH-steve-grubb · RH-steve-grubb · commit 3fcaa94ca6ec · 2021-07-03T13:33:30.000-04:00
diff --git a/ChangeLog b/ChangeLog
@@ -3,6 +3,7 @@
 - Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
 - Change auparse_feed_has_data in auparse to include incomplete events
 - Auditd, stop linking against -lrt
+- Add ProtectHome and RestrictRealtime to auditd.service
 
 3.0.2
 - In audispd-statsd plugin, use struct sockaddr_storage (Ville Heikkinen)
diff --git a/init.d/auditd.service b/init.d/auditd.service
@@ -33,6 +33,8 @@ MemoryDenyWriteExecute=true
 LockPersonality=true
 ProtectControlGroups=true
 ProtectKernelModules=true
+ProtectHome=true
+RestrictRealtime=true
 
 [Install]
 WantedBy=multi-user.target
