projects
/
platform
/
upstream
/
connman.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Merge "Fix svace 'UNREACHABLE_CODE.NO_PATH' warnings" into tizen
[platform/upstream/connman.git]
/
vpn
/
connman-vpn.service.in
diff --git
a/vpn/connman-vpn.service.in
b/vpn/connman-vpn.service.in
index
71abb57
..
a8f2948
100755
(executable)
--- a/
vpn/connman-vpn.service.in
+++ b/
vpn/connman-vpn.service.in
@@
-5,11
+5,16
@@
After=dbus.socket
[Service]
Type=dbus
[Service]
Type=dbus
+User=network_fw
+Group=network_fw
BusName=net.connman.vpn
BusName=net.connman.vpn
-ExecStart=@sbindir@/connman-vpnd -n
+SmackProcessLabel=System
+ExecStart=@bindir@/connman-vpnd -n
StandardOutput=null
StandardOutput=null
-CapabilityBoundingSet=~CAP_MAC_ADMIN
-CapabilityBoundingSet=~CAP_MAC_OVERRIDE
+Capabilities=cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i
+SecureBits=keep-caps
+ProtectHome=read-only
+ProtectSystem=full
[Install]
WantedBy=multi-user.target
[Install]
WantedBy=multi-user.target