From 2286fdf7c5d36864b5c46c4c784774a7cfc55213 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 19 Apr 2011 06:07:29 +0200
Subject: [PATCH] hostnamed: drop all caps but CAP_SYS_ADMIN

---
 units/systemd-hostnamed.service.in | 1 +
 1 file changed, 1 insertion(+)

diff --git a/units/systemd-hostnamed.service.in b/units/systemd-hostnamed.service.in
index 32a3ab5f..6efab1e2 100644
--- a/units/systemd-hostnamed.service.in
+++ b/units/systemd-hostnamed.service.in
@@ -14,3 +14,4 @@ Description=Hostname Service
 ExecStart=@rootlibexecdir@/systemd-hostnamed
 Type=dbus
 BusName=org.freedesktop.hostname1
+CapabilityBoundingSet=CAP_SYS_ADMIN
-- 
2.39.5