units: set capability bounding set for syslog services

[elogind.git] / units / systemd-logger.service.in

diff --git a/units/systemd-logger.service.in b/units/systemd-logger.service.in
index 5fc0532033e2c7d45951585e70c70f799a4162ae..5f7fe40939f6ac78a0674c75d6ed10257af61c30 100644 (file)
--- a/units/systemd-logger.service.in
+++ b/units/systemd-logger.service.in
@@ -8,9 +8,13 @@
 # See systemd.special(7) for details
 
 [Unit]
-Description=systemd Logging Daemon
-After=@SPECIAL_SYSLOG_SERVICE@
+Description=Stdio Syslog Bridge
+DefaultDependencies=no
+Requires=syslog.socket
+After=syslog.socket
 
 [Service]
 ExecStart=@rootlibexecdir@/systemd-logger
-Type=simple
+NotifyAccess=all
+StandardOutput=null
+CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SETUID CAP_SETGID