From 5492897b34a3c60b185575a60624151facc062ae Mon Sep 17 00:00:00 2001 From: Beniamino Galvani Date: Mon, 5 May 2025 15:10:21 +0200 Subject: [PATCH] service: enable CAP_BPF --- data/NetworkManager.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/NetworkManager.service.in b/data/NetworkManager.service.in index 8cd2ac87a3..129131b837 100644 --- a/data/NetworkManager.service.in +++ b/data/NetworkManager.service.in @@ -19,7 +19,7 @@ KillMode=process # With a huge number of interfaces, starting can take a long time. TimeoutStartSec=600 -CapabilityBoundingSet=CAP_NET_ADMIN CAP_DAC_OVERRIDE CAP_NET_RAW CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_MODULE CAP_AUDIT_WRITE CAP_KILL CAP_SYS_CHROOT +CapabilityBoundingSet=CAP_NET_ADMIN CAP_DAC_OVERRIDE CAP_NET_RAW CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_MODULE CAP_AUDIT_WRITE CAP_KILL CAP_SYS_CHROOT CAP_BPF ProtectSystem=true ProtectHome=read-only