chiark / gitweb /
machined: run machined at minimal capabilities
authorLennart Poettering <lennart@poettering.net>
Fri, 19 Jul 2013 01:49:24 +0000 (03:49 +0200)
committerLennart Poettering <lennart@poettering.net>
Fri, 19 Jul 2013 01:49:24 +0000 (03:49 +0200)
units/systemd-machined.service.in

index 87a81b9..26bfe03 100644 (file)
@@ -17,3 +17,4 @@ ExecStart=@rootlibexecdir@/systemd-machined
 Restart=always
 RestartSec=0
 BusName=org.freedesktop.machine1
+CapabilityBoundingSet=CAP_KILL