diff --git a/debian/ngcp-rtpengine-daemon.service b/debian/ngcp-rtpengine-daemon.service index 41f205b52..9d29da5c9 100644 --- a/debian/ngcp-rtpengine-daemon.service +++ b/debian/ngcp-rtpengine-daemon.service @@ -66,6 +66,7 @@ CapabilityBoundingSet= # Service process does not receive ambient capabilities # NOTE: we need caps for running as non-root user +CapabilityBoundingSet=CAP_NET_ADMIN CAP_SYS_NICE AmbientCapabilities=CAP_NET_ADMIN CAP_SYS_NICE # Service has no access to other software's temporary files