File harden_atop.service.patch of Package atop
diff -urEbw atop-2.7.1/atop.service atop-2.7.1.new/atop.service
--- atop-2.7.1/atop.service 2022-01-08 12:49:00.000000000 +0100
+++ atop-2.7.1.new/atop.service 2022-03-01 00:21:11.621320262 +0100
@@ -3,6 +3,19 @@
Documentation=man:atop(1)
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=simple
Environment="LOGOPTS="
Environment="LOGINTERVAL=600"