chiark / gitweb /
hostnamed: drop all caps but CAP_SYS_ADMIN
[elogind.git] / units / systemd-hostnamed.service.in
index 32a3ab5..6efab1e 100644 (file)
@@ -14,3 +14,4 @@ Description=Hostname Service
 ExecStart=@rootlibexecdir@/systemd-hostnamed
 Type=dbus
 BusName=org.freedesktop.hostname1
+CapabilityBoundingSet=CAP_SYS_ADMIN