units: enable MemoryDenyWriteExecute (#3459)

[thirdparty/systemd.git] / units / systemd-networkd.service.m4.in

diff --git a/units/systemd-networkd.service.m4.in b/units/systemd-networkd.service.m4.in
index 27d4d589622841ea6b9d19459f5b2877ad807d07..3c9970fa48a2c8c521df5f1f0695ab03e28ea4c0 100644 (file)
--- a/units/systemd-networkd.service.m4.in
+++ b/units/systemd-networkd.service.m4.in
@@ -31,6 +31,7 @@ CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_N
 ProtectSystem=full
 ProtectHome=yes
 WatchdogSec=3min
+MemoryDenyWriteExecute=yes
 
 [Install]
 WantedBy=multi-user.target