timesyncd: limit capabilities to CAP_SYS_TIME

2014-05-15 18:55:19 +02:00
parent 679be2a742
commit e3ad07d21c
1 changed files with 1 additions and 0 deletions
@@ -16,6 +16,7 @@ Type=notify
 Restart=always
 RestartSec=0
 ExecStart=@rootlibexecdir@/systemd-timesyncd
+CapabilityBoundingSet=CAP_SYS_TIME

 [Install]
 WantedBy=multi-user.target