radvd.service.in | 5 +++--

 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/radvd.service.in b/radvd.service.in

index 39b2977..9d2f402 100644

--- a/radvd.service.in

+++ b/radvd.service.in

@@ -9,8 +9,9 @@ After=network.target

 [Service]

 Type=forking

+EnvironmentFile=-/etc/sysconfig/radvd

 ExecStartPre=@SBINDIR@/radvd --logmethod stderr_clean --configtest

-ExecStart=@SBINDIR@/radvd --logmethod stderr_clean

+ExecStart=@SBINDIR@/radvd --logmethod stderr_clean $OPTIONS

 ExecReload=@SBINDIR@/radvd --logmethod stderr_clean --configtest

 ExecReload=/bin/kill -HUP $MAINPID

 PIDFile=@PATH_RADVD_PID@

@@ -19,7 +20,7 @@ PIDFile=@PATH_RADVD_PID@

 CPUSchedulingPolicy=idle

 # Allow for binding to low ports and doing raw network access

-CapabilityBoundingSet=CAP_NET_BIND_SERVICE  CAP_NET_RAW

+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETUID CAP_SETGID

 # Set up a new file system namespace and mounts private /tmp and /var/tmp directories

 # so this service cannot access the global directories and other processes cannot