Merge pull request #12420 from mrc0mmand/coccinelle-tweaks

[thirdparty/systemd.git] / units / systemd-hostnamed.service.in

diff --git a/units/systemd-hostnamed.service.in b/units/systemd-hostnamed.service.in
index 9c925e80d9fe57bb1acb0bc3c0d2d4a4e0e6ab33..b4f606cf785a6b6e631b086a350ef4101e7509b0 100644 (file)
--- a/units/systemd-hostnamed.service.in
+++ b/units/systemd-hostnamed.service.in
@@ -32,6 +32,7 @@ ReadWritePaths=/etc
 RestrictAddressFamilies=AF_UNIX
 RestrictNamespaces=yes
 RestrictRealtime=yes
+RestrictSUIDSGID=yes
 SystemCallArchitectures=native
 SystemCallErrorNumber=EPERM
 SystemCallFilter=@system-service sethostname