[patch] Add CAP_KILL to the CapabilityBoundingSet

tor.service.diff (text/plain), 415 bytes, created by Łukasz Stelmach on 2015-03-07 19:24:54 UTC

--- /usr/lib64/systemd/system/tor.service	2014-12-27 17:59:41.000000000 +0100
+++ /etc/systemd/system/tor.service	2015-03-07 20:23:08.038765816 +0100
@@ -10,7 +10,7 @@
 LimitNOFILE=30000
 
 # Hardening options:
-CapabilityBoundingSet = CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE
+CapabilityBoundingSet = CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_KILL
 PrivateTmp = yes
 PrivateDevices = yes
 ProtectHome = yes