Merge "Fix svace 'UNREACHABLE_CODE.NO_PATH' warnings" into tizen

[platform/upstream/connman.git] / vpn / connman-vpn.service.in

diff --git a/vpn/connman-vpn.service.in b/vpn/connman-vpn.service.in
index a4c294e..a8f2948 100755 (executable)
--- a/vpn/connman-vpn.service.in
+++ b/vpn/connman-vpn.service.in
@@ -11,8 +11,10 @@ BusName=net.connman.vpn
 SmackProcessLabel=System
 ExecStart=@bindir@/connman-vpnd -n
 StandardOutput=null
-Capabilities=cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=i
+Capabilities=cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i
 SecureBits=keep-caps
+ProtectHome=read-only
+ProtectSystem=full
 
 [Install]
 WantedBy=multi-user.target