X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=units%2Fsystemd-bus-proxyd.service.m4.in;fp=units%2Fuser%2Fsystemd-bus-proxyd%40.service.in;h=ffaf0bdc87c0a87252592c7c9f2f215df2ede123;hp=0ab5462ed5d93f1318b1b6038eec3dd5601a9b2a;hb=a8a1a43f482af480c375a97921df6b42452c7092;hpb=f4a53250acb3aea2eb5ebed059887b9417afbd9e

diff --git a/units/user/systemd-bus-proxyd@.service.in b/units/systemd-bus-proxyd.service.m4.in
similarity index 65%
rename from units/user/systemd-bus-proxyd@.service.in
rename to units/systemd-bus-proxyd.service.m4.in
index 0ab5462ed..ffaf0bdc8 100644
--- a/units/user/systemd-bus-proxyd@.service.in
+++ b/units/systemd-bus-proxyd.service.m4.in
@@ -9,8 +9,11 @@
 Description=Legacy D-Bus Protocol Compatibility Daemon
 
 [Service]
-# The first argument will be replaced by the service by information on
-# the process requesting the proxy, we need a placeholder to keep the
-# space available for this.
-ExecStart=@rootlibexecdir@/systemd-bus-proxyd --address=kernel:path=/sys/fs/kdbus/%U-user/bus xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+ExecStart=@rootlibexecdir@/systemd-bus-proxyd --address=kernel:path=/sys/fs/kdbus/0-system/bus
 NotifyAccess=main
+CapabilityBoundingSet=CAP_IPC_OWNER CAP_SETUID CAP_SETGID CAP_SETPCAP m4_ifdef(`HAVE_SMACK', CAP_MAC_ADMIN )
+PrivateTmp=yes
+PrivateDevices=yes
+PrivateNetwork=yes
+ProtectSystem=full
+ProtectHome=yes