daemon: enable recent systemd directive by default

This will generate a warning for some users, but that should be
sustainable.

diff --git a/src/daemon/lldpd.service.in b/src/daemon/lldpd.service.in
index a28261c57e2af75d96ae0aa4dee5098e7c3632f4..fdb7338f1dd6fea0fc7e675205a7a43eccd5451e 100644 (file)
--- a/src/daemon/lldpd.service.in
+++ b/src/daemon/lldpd.service.in
@@ -13,14 +13,12 @@ ExecStartPre=@mkdir_p@ @PRIVSEP_CHROOT@
 ExecStart=@sbindir@/lldpd $DAEMON_ARGS $LLDPD_OPTIONS
 Restart=on-failure
 PrivateTmp=yes
-# systemd >= 214
-#ProtectHome=yes
-#ProtectSystem=yes
-# systemd >= 232
-#ProtectSystem=full
-#ProtectKernelTunables=yes
-#ProtectControlGroups=yes
-#ProtectKernelModules=yes
+ProtectHome=yes
+ProtectSystem=yes
+ProtectSystem=full
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+ProtectKernelModules=yes
 
 [Install]
 WantedBy=multi-user.target