diff --git a/extra/systemd/pyruse.service b/extra/systemd/pyruse.service index 1ee57d7..1b99850 100644 --- a/extra/systemd/pyruse.service +++ b/extra/systemd/pyruse.service @@ -4,7 +4,7 @@ Description=Route systemd-journal logs to filters and actions (ban, report…) [Service] ExecStart=/usr/bin/pyruse WorkingDirectory=/etc/pyruse -CapabilityBoundingSet=CAP_SYS_CHROOT +CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT NoNewPrivileges=true PrivateDevices=yes PrivateTmp=yes