diff options
Diffstat (limited to 'units')
| -rw-r--r-- | units/systemd-timesyncd.service.in | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/units/systemd-timesyncd.service.in b/units/systemd-timesyncd.service.in index e279d1bc29..158438e627 100644 --- a/units/systemd-timesyncd.service.in +++ b/units/systemd-timesyncd.service.in @@ -16,7 +16,9 @@ Type=notify Restart=always RestartSec=0 ExecStart=@rootlibexecdir@/systemd-timesyncd -CapabilityBoundingSet=CAP_SYS_TIME +CapabilityBoundingSet=CAP_SYS_TIME CAP_SETUID CAP_SETGID CAP_SETPCAP +PrivateTmp=yes +PrivateDevices=yes [Install] WantedBy=multi-user.target |