chiark / gitweb /
timesyncd: limit capabilities to CAP_SYS_TIME
[elogind.git] / units / systemd-networkd.service.in
1 #  This file is part of systemd.
2 #
3 #  systemd is free software; you can redistribute it and/or modify it
4 #  under the terms of the GNU Lesser General Public License as published by
5 #  the Free Software Foundation; either version 2.1 of the License, or
6 #  (at your option) any later version.
7
8 [Unit]
9 Description=Network Service
10 Documentation=man:systemd-networkd.service(8)
11 DefaultDependencies=no
12 After=dbus.service systemd-udevd-kernel.socket
13 Before=network.target
14 Wants=network.target
15 ConditionCapability=CAP_NET_ADMIN
16
17 [Service]
18 Type=notify
19 Restart=always
20 RestartSec=0
21 ExecStart=@rootlibexecdir@/systemd-networkd
22 CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_PTRACE CAP_SYS_MODULE
23 WatchdogSec=1min
24
25 [Install]
26 Also=systemd-networkd-wait-online.service
27 WantedBy=multi-user.target