]> git.ipfire.org Git - thirdparty/systemd.git/blobdiff - units/systemd-resolved.service.in
docs: fix typo
[thirdparty/systemd.git] / units / systemd-resolved.service.in
index eac3f31012ca8f59b1dfc41f26aaf0bd495f4fb4..eee5d5ea8f4133fde2077cd6c55391a9c7c4c443 100644 (file)
@@ -30,7 +30,6 @@ PrivateDevices=yes
 PrivateTmp=yes
 ProtectControlGroups=yes
 ProtectHome=yes
-ProtectHostname=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
 ProtectSystem=strict
@@ -39,6 +38,7 @@ RestartSec=0
 RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
 RestrictNamespaces=yes
 RestrictRealtime=yes
+RestrictSUIDSGID=yes
 RuntimeDirectory=systemd/resolve
 RuntimeDirectoryPreserve=yes
 SystemCallArchitectures=native