X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=units%2Fsystemd-importd.service.in;h=a540040bfb87346b4ff05e312133d3bdc8cd4e76;hb=49d7fc99b939aa9e6601abb2d871f3ef78dc90f5;hp=b9cb97e6b96fee3910772ed1cfb25b10afa21a58;hpb=3d7415f43f0fe6a821d7bc4a341ba371e8a30ef3;p=elogind.git

diff --git a/units/systemd-importd.service.in b/units/systemd-importd.service.in
index b9cb97e6b..a540040bf 100644
--- a/units/systemd-importd.service.in
+++ b/units/systemd-importd.service.in
@@ -12,8 +12,6 @@ Documentation=man:systemd-importd.service(8)
 [Service]
 ExecStart=@rootlibexecdir@/systemd-importd
 BusName=org.freedesktop.import1
+CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP
+NoNewPrivileges=yes
 WatchdogSec=1min
-PrivateTmp=yes
-PrivateDevices=yes
-ProtectSystem=full
-ProtectHome=yes