From: Lennart Poettering <lennart@poettering.net>
Date: Fri, 19 Jul 2013 01:49:24 +0000 (+0200)
Subject: machined: run machined at minimal capabilities
X-Git-Tag: v206~33
X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=bc5cb1d525461c75e69ce1f82a52e223309cca7c;hp=085b90af43fefd9ed195902c4b55f1da3c568554

machined: run machined at minimal capabilities
---

diff --git a/units/systemd-machined.service.in b/units/systemd-machined.service.in
index 87a81b9c8..26bfe0353 100644
--- a/units/systemd-machined.service.in
+++ b/units/systemd-machined.service.in
@@ -17,3 +17,4 @@ ExecStart=@rootlibexecdir@/systemd-machined
 Restart=always
 RestartSec=0
 BusName=org.freedesktop.machine1
+CapabilityBoundingSet=CAP_KILL