diff options
Diffstat (limited to 'vpn/connman-vpn.service.in')
| -rw-r--r-- | vpn/connman-vpn.service.in | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/vpn/connman-vpn.service.in b/vpn/connman-vpn.service.in index de65a70d..e98fb714 100644 --- a/vpn/connman-vpn.service.in +++ b/vpn/connman-vpn.service.in @@ -1,13 +1,14 @@ [Unit] Description=ConnMan VPN service -Requires=dbus.socket -After=dbus.socket [Service] Type=dbus BusName=net.connman.vpn ExecStart=@sbindir@/connman-vpnd -n StandardOutput=null +CapabilityBoundingSet=CAP_KILL CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW +ProtectHome=read-only +ProtectSystem=full [Install] WantedBy=multi-user.target |