3 files changed, 13 insertions, 4 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 435906215628..8bb1517fd9f4 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = lsyncd
 	pkgdesc = Live Syncing (Mirror) Daemon
 	pkgver = 2.3.1
-	pkgrel = 4
+	pkgrel = 5
 	url = https://github.com/lsyncd/lsyncd
 	arch = x86_64
 	license = GPL2
@@ -17,7 +17,7 @@ pkgbase = lsyncd
 	source = lsyncd.sysusers
 	source = use-lua53.patch
 	sha256sums = 501f70368da8c43d3da81bf9bbb22f43dfcbc9f96b03c745842f326723c091c7
-	sha256sums = e9a55c1851906f36c74213565b800e1118d71a98546ccbbb6ac758f0eb89e1d5
+	sha256sums = 254a7632ad70416e4be7df17ec902d69d927e2e09b7de8e68b07e6f65d22ccbc
 	sha256sums = f3d6b6c1411de9f6c9a2980e41dcfb87ede9c02005ebb881878f399f062d825f
 	sha256sums = ef55721553bdac0e3441ced58b9df1bb0d24f97513e66c12c3e94a477ba89115
 
diff --git a/PKGBUILD b/PKGBUILD
index d60d2da6733a..eaecdda03513 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -4,7 +4,7 @@
 
 pkgname=lsyncd
 pkgver=2.3.1
-pkgrel=4
+pkgrel=5
 pkgdesc="Live Syncing (Mirror) Daemon"
 arch=(x86_64)
 url="https://github.com/lsyncd/lsyncd"
@@ -31,7 +31,7 @@ source=(
 )
 sha256sums=(
   '501f70368da8c43d3da81bf9bbb22f43dfcbc9f96b03c745842f326723c091c7'
-  'e9a55c1851906f36c74213565b800e1118d71a98546ccbbb6ac758f0eb89e1d5'
+  '254a7632ad70416e4be7df17ec902d69d927e2e09b7de8e68b07e6f65d22ccbc'
   'f3d6b6c1411de9f6c9a2980e41dcfb87ede9c02005ebb881878f399f062d825f'
   'ef55721553bdac0e3441ced58b9df1bb0d24f97513e66c12c3e94a477ba89115'
 )
diff --git a/lsyncd.service b/lsyncd.service
index 0127427adcde..b9e12c51e406 100644
--- a/lsyncd.service
+++ b/lsyncd.service
@@ -11,8 +11,17 @@ ExecReload=/bin/kill -HUP $MAINPID
 
 # Hardening
 PrivateTmp=true
+ProtectHome=true
 ProtectSystem=full
 NoNewPrivileges=true
+ProtectControlGroups=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+PrivateDevices=true
+# RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictNamespaces=true
+RestrictRealtime=true
+SystemCallArchitectures=native
 
 [Install]
 WantedBy=multi-user.target