From 494f296a3baab08522617b24b1f126d8f9a17502 Mon Sep 17 00:00:00 2001
From: Michael Biebl <biebl@debian.org>
Date: Wed, 20 Jan 2016 16:26:51 +0100
Subject: Imported Upstream version 1.1.90

---
 data/NetworkManager.service.in | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'data/NetworkManager.service.in')

diff --git a/data/NetworkManager.service.in b/data/NetworkManager.service.in
index 980573d3..6690f5a5 100644
--- a/data/NetworkManager.service.in
+++ b/data/NetworkManager.service.in
@@ -11,6 +11,9 @@ ExecStart=@sbindir@/NetworkManager --no-daemon
 Restart=on-failure
 # NM doesn't want systemd to kill its children for it
 KillMode=process
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_DAC_OVERRIDE CAP_NET_RAW CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_MODULE CAP_AUDIT_WRITE CAP_KILL
+ProtectSystem=true
+ProtectHome=read-only
 
 [Install]
 WantedBy=multi-user.target
-- 
cgit 1.3.0-6-gf8a5