units: set capability bounding set for syslog services

[elogind.git] / units / systemd-kmsg-syslogd.service.in

diff --git a/units/systemd-kmsg-syslogd.service.in b/units/systemd-kmsg-syslogd.service.in
index adb3750211a603026c6f6a05735c982cb24d189d..b20889e5e5e4cab9a1ebbef34b15cde3bba8bd85 100644 (file)
--- a/units/systemd-kmsg-syslogd.service.in
+++ b/units/systemd-kmsg-syslogd.service.in
@@ -8,10 +8,12 @@
 # See systemd.special(7) for details
 
 [Unit]
-Description=systemd Syslog Kernel Log Buffer Bridge
+Description=Syslog Kernel Log Buffer Bridge
 DefaultDependencies=no
 
 [Service]
 ExecStart=@rootlibexecdir@/systemd-kmsg-syslogd
 NotifyAccess=all
+StandardOutput=null
 Sockets=syslog.socket
+CapabilityBoundingSet=CAP_DAC_OVERRIDE