daemon: harden transmission-daemon.service

Systemd 227 introduced the option to make a service disallow elevating
privileges.

diff --git a/daemon/transmission-daemon.service b/daemon/transmission-daemon.service
index 8a1d429c7636f504d4749edc09462478cd5cfdd0..1009f40a7e1eab39526fb76c26381fbb765384ca 100644 (file)
--- a/daemon/transmission-daemon.service
+++ b/daemon/transmission-daemon.service
@@ -7,6 +7,7 @@ User=transmission
 Type=notify
 ExecStart=/usr/bin/transmission-daemon -f --log-error
 ExecReload=/bin/kill -s HUP $MAINPID
+NoNewPrivileges=true
 
 [Install]
 WantedBy=multi-user.target