From bc5cb1d525461c75e69ce1f82a52e223309cca7c Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 19 Jul 2013 03:49:24 +0200 Subject: machined: run machined at minimal capabilities --- units/systemd-machined.service.in | 1 + 1 file changed, 1 insertion(+) (limited to 'units') diff --git a/units/systemd-machined.service.in b/units/systemd-machined.service.in index 87a81b9c85..26bfe03537 100644 --- a/units/systemd-machined.service.in +++ b/units/systemd-machined.service.in @@ -17,3 +17,4 @@ ExecStart=@rootlibexecdir@/systemd-machined Restart=always RestartSec=0 BusName=org.freedesktop.machine1 +CapabilityBoundingSet=CAP_KILL -- cgit v1.2.3-54-g00ecf