SmackProcessLabel=System
ExecStart=@bindir@/connman-vpnd -n
StandardOutput=null
-Capabilities=cap_setgid,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i
+Capabilities=cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i
SecureBits=keep-caps
+ProtectHome=read-only
+ProtectSystem=full
[Install]
WantedBy=multi-user.target