units: set capability bounding set for syslog services

[elogind.git] / units / systemd-logger.service.in

diff --git a/units/systemd-logger.service.in b/units/systemd-logger.service.in
index f82db15ac16c9102acce52850d700475d0ff0844..5f7fe40939f6ac78a0674c75d6ed10257af61c30 100644 (file)
--- a/units/systemd-logger.service.in
+++ b/units/systemd-logger.service.in
@@ -10,9 +10,11 @@
 [Unit]
 Description=Stdio Syslog Bridge
 DefaultDependencies=no
+Requires=syslog.socket
 After=syslog.socket
 
 [Service]
 ExecStart=@rootlibexecdir@/systemd-logger
 NotifyAccess=all
 StandardOutput=null
+CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SETUID CAP_SETGID