Added support of WPA3-SAE security mode.

[platform/upstream/connman.git] / src / connman.service.in

diff --git a/src/connman.service.in b/src/connman.service.in
index 503ec45..f0bf5c3 100755 (executable)
--- a/src/connman.service.in
+++ b/src/connman.service.in
@@ -5,12 +5,15 @@ DefaultDependencies=no
 
 [Service]
 Type=dbus
+User=network_fw
+Group=network_fw
 BusName=net.connman
 Restart=on-failure
-ExecStart=@sbindir@/connmand -n --noplugin vpn
+SmackProcessLabel=System
+ExecStart=@bindir@/connmand -n --nobacktrace --noplugin vpn
 StandardOutput=null
-CapabilityBoundingSet=~CAP_MAC_ADMIN
-CapabilityBoundingSet=~CAP_MAC_OVERRIDE
+Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i
+SecureBits=keep-caps
 
 [Install]
 WantedBy=multi-user.target