X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=units%2Fsystemd-logind.service.in;h=f087e99ce2e75f7470199c676af72ef1570243f8;hp=68803fb3811f49a05e59b5a56752f7d7f17f0f98;hb=3c4230a5afb27faec2176d4642c0e2e145971b5c;hpb=417116f23432073162ebfcb286a7800846482eed diff --git a/units/systemd-logind.service.in b/units/systemd-logind.service.in index 68803fb38..f087e99ce 100644 --- a/units/systemd-logind.service.in +++ b/units/systemd-logind.service.in @@ -23,10 +23,8 @@ ExecStart=@rootlibexecdir@/systemd-logind Restart=always RestartSec=0 BusName=org.freedesktop.login1 -CapabilityBoundingSet=CAP_SYS_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG +CapabilityBoundingSet=CAP_SYS_ADMIN CAP_MAC_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG WatchdogSec=1min -ReadOnlySystem=yes -ProtectedHome=yes # Increase the default a bit in order to allow many simultaneous # logins since we keep one fd open per session.