diff --git a/contrib/unbound.service.in b/contrib/unbound.service.in index 6726f9d8c..334ab6d17 100644 --- a/contrib/unbound.service.in +++ b/contrib/unbound.service.in @@ -13,7 +13,7 @@ ExecReload=/bin/kill -HUP $MAINPID ExecStart=@UNBOUND_SBIN_DIR@/unbound -d NotifyAccess=main Type=notify -CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_SYS_RESOURCE CAP_NET_RAW +CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_SYS_RESOURCE CAP_NET_RAW CAP_KILL MemoryDenyWriteExecute=true NoNewPrivileges=true PrivateDevices=true