[Unit]
Description=DBus interface for snapper
Documentation=man:snapperd(8)

[Service]
Type=dbus
BusName=org.opensuse.Snapper
ExecStart=/usr/sbin/snapperd

CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_FOWNER CAP_CHOWN CAP_FSETID CAP_SETFCAP CAP_SYS_ADMIN CAP_SYS_MODULE CAP_IPC_LOCK CAP_SYS_NICE
LockPersonality=true
NoNewPrivileges=false
PrivateNetwork=true
ProtectHostname=true
RestrictAddressFamilies=AF_UNIX
RestrictRealtime=true
PrivateMounts=no