From 5165d62538a3e785d1ff84d28f424453a1c54152 Mon Sep 17 00:00:00 2001
From: Eduard Toloza <tolosaeduard@gmail.com>
Date: Sat, 23 Feb 2019 18:55:22 -0500
Subject: [PATCH] Added protection things

---
 system-units/rnetworking.service | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/system-units/rnetworking.service b/system-units/rnetworking.service
index 441b387..e0f98c2 100644
--- a/system-units/rnetworking.service
+++ b/system-units/rnetworking.service
@@ -3,11 +3,14 @@
  After=network-online.target
 
 [Service]
- Type=oneshot
- ExecStart=/usr/bin/rnetworking
- TimeoutStopSec=180
- KillMode=process
- KillSignal=SIGINT
+Type=oneshot
+ProtectHome=true
+ProtectSystem=strict
+ExecStart=/usr/bin/rnetworking
+CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE LimitNPROC=10
+DeviceAllow=/dev/null rw
+DeviceAllow=/dev/net/tun rw
+KillMode=process
 
 [Install]
  WantedBy=multi-user.target