diff -urNr boinc-client_release-7.14-7.14.2-orig-v2/client/scripts/boinc-client.service.in boinc-client_release-7.14-7.14.2/client/scripts/boinc-client.service.in
--- boinc-client_release-7.14-7.14.2-orig-v2/client/scripts/boinc-client.service.in 2018-12-14 20:17:35.428164944 +0100
+++ boinc-client_release-7.14-7.14.2/client/scripts/boinc-client.service.in 2018-12-14 20:18:08.240162879 +0100
@@ -5,6 +5,18 @@
[Service]
ProtectHome=true
+PrivateTmp=true
+ProtectSystem=strict
+NoNewPrivileges=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectControlGroups=true
+RestrictRealtime=true
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+RestrictNamespaces=true
+PrivateUsers=true
+CapabilityBoundingSet=
+ReadWritePaths=/var/lib/boinc
Type=simple
Nice=19
User=boinc