units: set capability bounding set for syslog services

[elogind.git] / units / systemd-logger.service.in

diff --git a/units/systemd-logger.service.in b/units/systemd-logger.service.in
index ba6fa479439e0667d1a0fc3856f082065b0f961c..5f7fe40939f6ac78a0674c75d6ed10257af61c30 100644 (file)
--- a/units/systemd-logger.service.in
+++ b/units/systemd-logger.service.in
@@ -1,23 +1,20 @@
 #  This file is part of systemd.
 #
-#  Copyright 2010 Lennart Poettering
-#
 #  systemd is free software; you can redistribute it and/or modify it
 #  under the terms of the GNU General Public License as published by
 #  the Free Software Foundation; either version 2 of the License, or
 #  (at your option) any later version.
-#
-#  systemd is distributed in the hope that it will be useful, but
-#  WITHOUT ANY WARRANTY; without even the implied warranty of
-#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
-#  General Public License for more details.
-#
-#  You should have received a copy of the GNU General Public License
-#  along with systemd; If not, see <http://www.gnu.org/licenses/>.
+
+# See systemd.special(7) for details
 
 [Unit]
-Description=systemd Logging Daemon
+Description=Stdio Syslog Bridge
+DefaultDependencies=no
+Requires=syslog.socket
+After=syslog.socket
 
 [Service]
-ExecStart=@pkglibexecdir@/systemd-logger
-Type=simple
+ExecStart=@rootlibexecdir@/systemd-logger
+NotifyAccess=all
+StandardOutput=null
+CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SETUID CAP_SETGID