From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 19 Apr 2011 04:07:29 +0000 (+0200)
Subject: hostnamed: drop all caps but CAP_SYS_ADMIN
X-Git-Tag: v25~18
X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=2286fdf7c5d36864b5c46c4c784774a7cfc55213

hostnamed: drop all caps but CAP_SYS_ADMIN
---

diff --git a/units/systemd-hostnamed.service.in b/units/systemd-hostnamed.service.in
index 32a3ab5f9..6efab1e25 100644
--- a/units/systemd-hostnamed.service.in
+++ b/units/systemd-hostnamed.service.in
@@ -14,3 +14,4 @@ Description=Hostname Service
 ExecStart=@rootlibexecdir@/systemd-hostnamed
 Type=dbus
 BusName=org.freedesktop.hostname1
+CapabilityBoundingSet=CAP_SYS_ADMIN