Commit 62acbd50 authored by Matti Lehtimäki's avatar Matti Lehtimäki

Merge branch 'sandbox' into 'master'

[systemd] Sandbox the udhcpd service. JB#37897 JB#44449

See merge request !11
parents a30fbde4 708755d4
......@@ -6,3 +6,9 @@ Conflicts=shutdown.target
[Service]
ExecStart=/usr/sbin/udhcpd -f
# Sandboxing
CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_NET_BIND_SERVICE CAP_NET_RAW
PrivateDevices=yes
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment