Remove capability and Change from dbus to systemd for vpn service

[platform/upstream/connman.git] / vpn / connman-vpn.service.in

diff --git a/vpn/connman-vpn.service.in b/vpn/connman-vpn.service.in
old mode 100644 (file)
new mode 100755 (executable)
index de65a70..71abb57
--- a/vpn/connman-vpn.service.in
+++ b/vpn/connman-vpn.service.in
@@ -8,6 +8,8 @@ Type=dbus
 BusName=net.connman.vpn
 ExecStart=@sbindir@/connman-vpnd -n
 StandardOutput=null
+CapabilityBoundingSet=~CAP_MAC_ADMIN
+CapabilityBoundingSet=~CAP_MAC_OVERRIDE
 
 [Install]
 WantedBy=multi-user.target