selinux: use setcon() instead of reexec to apply selinux policy

[elogind.git] / units / systemd-kmsg-syslogd.service.in

diff --git a/units/systemd-kmsg-syslogd.service.in b/units/systemd-kmsg-syslogd.service.in
index aea75837344cef597e086b72704563ef5e888f5b..b20889e5e5e4cab9a1ebbef34b15cde3bba8bd85 100644 (file)
--- a/units/systemd-kmsg-syslogd.service.in
+++ b/units/systemd-kmsg-syslogd.service.in
@@ -16,3 +16,4 @@ ExecStart=@rootlibexecdir@/systemd-kmsg-syslogd
 NotifyAccess=all
 StandardOutput=null
 Sockets=syslog.socket
+CapabilityBoundingSet=CAP_DAC_OVERRIDE