timesyncd: limit capabilities to CAP_SYS_TIME

[elogind.git] / units / systemd-journal-gatewayd.service.in

diff --git a/units/systemd-journal-gatewayd.service.in b/units/systemd-journal-gatewayd.service.in
index a01ce8da45372198d4e96d6a84c5e42815fa627d..e8e571e692a1362732f19cb719503691e48150a1 100644 (file)
--- a/units/systemd-journal-gatewayd.service.in
+++ b/units/systemd-journal-gatewayd.service.in
@@ -14,6 +14,9 @@ ExecStart=@rootlibexecdir@/systemd-journal-gatewayd
 User=systemd-journal-gateway
 Group=systemd-journal-gateway
 SupplementaryGroups=systemd-journal
+PrivateTmp=yes
+PrivateDevices=yes
+PrivateNetwork=yes
 
 [Install]
 Also=systemd-journal-gatewayd.socket