diff --git a/system-units/rnetworking.service b/system-units/rnetworking.service
index 441b387..e0f98c2 100644
--- a/system-units/rnetworking.service
+++ b/system-units/rnetworking.service
@@ -3,11 +3,14 @@
  After=network-online.target
 
 [Service]
- Type=oneshot
- ExecStart=/usr/bin/rnetworking
- TimeoutStopSec=180
- KillMode=process
- KillSignal=SIGINT
+Type=oneshot
+ProtectHome=true
+ProtectSystem=strict
+ExecStart=/usr/bin/rnetworking
+CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE LimitNPROC=10
+DeviceAllow=/dev/null rw
+DeviceAllow=/dev/net/tun rw
+KillMode=process
 
 [Install]
  WantedBy=multi-user.target