units: add SecureBits

[elogind.git] / units / systemd-importd.service.in

diff --git a/units/systemd-importd.service.in b/units/systemd-importd.service.in
index 26759ea0fb47ba970f1fbb5aeeee516ea7098e93..189c7638044370d7b1986adfe4c736e399bb51b2 100644 (file)
--- a/units/systemd-importd.service.in
+++ b/units/systemd-importd.service.in
@@ -14,6 +14,7 @@ ExecStart=@rootlibexecdir@/systemd-importd
 BusName=org.freedesktop.import1
 CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP
 NoNewPrivileges=yes
+SecureBits=noroot noroot-locked
 WatchdogSec=1min
 PrivateTmp=yes
 ProtectSystem=full