hostnamed: drop all caps but CAP_SYS_ADMIN

diff --git a/units/systemd-hostnamed.service.in b/units/systemd-hostnamed.service.in
index 32a3ab5f9a209e2094dd374991f3122819b0e9fb..6efab1e25fd2091733d3a81f6c24d2a272672fc4 100644 (file)
--- a/units/systemd-hostnamed.service.in
+++ b/units/systemd-hostnamed.service.in
@@ -14,3 +14,4 @@ Description=Hostname Service
 ExecStart=@rootlibexecdir@/systemd-hostnamed
 Type=dbus
 BusName=org.freedesktop.hostname1
+CapabilityBoundingSet=CAP_SYS_ADMIN