From cc5455ef28bc83e1a9ac4c6aa865ca6541fd704a Mon Sep 17 00:00:00 2001
From: Marcel Holtmann <marcel@holtmann.org>
Date: Mon, 10 Dec 2012 01:25:02 +0100
Subject: [PATCH] core: Set LimitNPROC and CapabilityBoundingSet options

---
 src/bluetooth.service.in | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/bluetooth.service.in b/src/bluetooth.service.in
index c8fd9c53d..78851196c 100644
--- a/src/bluetooth.service.in
+++ b/src/bluetooth.service.in
@@ -9,6 +9,8 @@ StandardOutput=null
 NotifyAccess=main
 #WatchdogSec=10
 #Restart=on-failure
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
+LimitNPROC=1
 
 [Install]
 WantedBy=bluetooth.target
-- 
2.47.3