Imported Upstream version 1.35

[platform/upstream/connman.git] / vpn / connman-vpn.service.in

diff --git a/vpn/connman-vpn.service.in b/vpn/connman-vpn.service.in
index de65a70..e98fb71 100644 (file)
--- a/vpn/connman-vpn.service.in
+++ b/vpn/connman-vpn.service.in
@@ -1,13 +1,14 @@
 [Unit]
 Description=ConnMan VPN service
-Requires=dbus.socket
-After=dbus.socket
 
 [Service]
 Type=dbus
 BusName=net.connman.vpn
 ExecStart=@sbindir@/connman-vpnd -n
 StandardOutput=null
+CapabilityBoundingSet=CAP_KILL CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
+ProtectHome=read-only
+ProtectSystem=full
 
 [Install]
 WantedBy=multi-user.target