NEWS: add more hint about MACAddressPolicy= change

[thirdparty/systemd.git] / units / systemd-importd.service.in

diff --git a/units/systemd-importd.service.in b/units/systemd-importd.service.in
index 20704a82324780d9f41ad9af8b1574caf901a7a5..38b7d7e94b4745f45e94f666fa101d8e3c76b9f9 100644 (file)
--- a/units/systemd-importd.service.in
+++ b/units/systemd-importd.service.in
@@ -20,6 +20,7 @@ KillMode=mixed
 CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP CAP_DAC_OVERRIDE
 NoNewPrivileges=yes
 MemoryDenyWriteExecute=yes
+ProtectHostname=yes
 RestrictRealtime=yes
 RestrictNamespaces=net
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6