X-Git-Url: http://review.tizen.org/git/?a=blobdiff_plain;f=vpn%2Fconnman-vpn.service.in;h=a8f2948f233d630b0f50a563258d1c5bb2378ff3;hb=d180a9d2152fdd28ea68f0fbe0ef52e9c7ceac5a;hp=71abb570be460665ea34c8b74ab70cedc97ebe3e;hpb=668f527b10857b9d1086474f7510b19418af89e9;p=platform%2Fupstream%2Fconnman.git

diff --git a/vpn/connman-vpn.service.in b/vpn/connman-vpn.service.in
index 71abb57..a8f2948 100755
--- a/vpn/connman-vpn.service.in
+++ b/vpn/connman-vpn.service.in
@@ -5,11 +5,16 @@ After=dbus.socket
 
 [Service]
 Type=dbus
+User=network_fw
+Group=network_fw
 BusName=net.connman.vpn
-ExecStart=@sbindir@/connman-vpnd -n
+SmackProcessLabel=System
+ExecStart=@bindir@/connman-vpnd -n
 StandardOutput=null
-CapabilityBoundingSet=~CAP_MAC_ADMIN
-CapabilityBoundingSet=~CAP_MAC_OVERRIDE
+Capabilities=cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw,cap_dac_override=i
+SecureBits=keep-caps
+ProtectHome=read-only
+ProtectSystem=full
 
 [Install]
 WantedBy=multi-user.target