debian/pcidentd.service: add capability set to run as non-root

57e329ab · Johannes Schilling · 32a97f32 · 57e329ab · 57e329ab
Commit 57e329ab authored Nov 01, 2017 by Johannes Schilling
--- a/debian/changelog
+++ b/debian/changelog
+pcidentd (2) unstable; urgency=medium
+
+  * pcidentd.service: add capability set to run as non-root
+
+ -- Johannes Schilling <johannes.schilling@cs.fau.de>  Wed, 01 Nov 2017 02:28:14 +0100
+
 pcidentd (1) unstable; urgency=medium

  * Initial release.

--- a/debian/pcidentd.service
+++ b/debian/pcidentd.service
@@ -6,6 +6,9 @@ Wants=network.target
 Type=simple
 ExecStart=/usr/bin/pcidentd
 User=pcidentd
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+

 [Install]
 WantedBy=multi-user.target