From e030b496f5c1e99c1d3090aaadeb0ba9badafc49 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 27 Jun 2015 21:48:54 +0200
Subject: add some extra security to systemd unit

---
 dyndhcpd@.service | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'dyndhcpd@.service')

diff --git a/dyndhcpd@.service b/dyndhcpd@.service
index 42550f1..ce49fd8 100644
--- a/dyndhcpd@.service
+++ b/dyndhcpd@.service
@@ -4,6 +4,10 @@ After=network.target
 
 [Service]
 ExecStart=/usr/bin/dyndhcpd -i%i
+ProtectSystem=full
+ProtectHome=on
+PrivateDevices=on
+NoNewPrivileges=on
 
 [Install]
 WantedBy=multi-user.target
-- 
cgit v1.2.3-54-g00ecf