units: set capability bounding set for syslog services

[elogind.git] / units / systemd-logger.service.in

diff --git a/units/systemd-logger.service.in b/units/systemd-logger.service.in
index d9708724e18fd229068f4dd71ec52b5599bec669..5f7fe40939f6ac78a0674c75d6ed10257af61c30 100644 (file)
--- a/units/systemd-logger.service.in
+++ b/units/systemd-logger.service.in
@@ -8,10 +8,13 @@
 # See systemd.special(7) for details
 
 [Unit]
-Description=Logging Daemon
+Description=Stdio Syslog Bridge
 DefaultDependencies=no
+Requires=syslog.socket
 After=syslog.socket
 
 [Service]
 ExecStart=@rootlibexecdir@/systemd-logger
 NotifyAccess=all
+StandardOutput=null
+CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SETUID CAP_SETGID