Merge pull request #12267 from keszybz/udev-settle-warning

[thirdparty/systemd.git] / units / systemd-localed.service.in

diff --git a/units/systemd-localed.service.in b/units/systemd-localed.service.in
index 01e0703d0e207c7da718feb6dd26f2d21becca24..7bca34409acec0fd8104f221d515203fa5fd1622 100644 (file)
--- a/units/systemd-localed.service.in
+++ b/units/systemd-localed.service.in
@@ -25,6 +25,7 @@ PrivateNetwork=yes
 PrivateTmp=yes
 ProtectControlGroups=yes
 ProtectHome=yes
+ProtectHostname=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
 ProtectSystem=strict
@@ -32,6 +33,7 @@ ReadWritePaths=/etc
 RestrictAddressFamilies=AF_UNIX
 RestrictNamespaces=yes
 RestrictRealtime=yes
+RestrictSUIDSGID=yes
 SystemCallArchitectures=native
 SystemCallErrorNumber=EPERM
 SystemCallFilter=@system-service