From d1d060c3a9fcdcaa4530be194e3442137c1e0af8 Mon Sep 17 00:00:00 2001
From: Jelle van der Waa <jelle@vdwaa.nl>
Date: Fri, 28 Dec 2018 22:23:33 +0100
Subject: [PATCH] daemon: harden transmission-daemon.service

Systemd 227 introduced the option to make a service disallow elevating
privileges.
---
 daemon/transmission-daemon.service | 1 +
 1 file changed, 1 insertion(+)

diff --git a/daemon/transmission-daemon.service b/daemon/transmission-daemon.service
index 8a1d429c7..1009f40a7 100644
--- a/daemon/transmission-daemon.service
+++ b/daemon/transmission-daemon.service
@@ -7,6 +7,7 @@ User=transmission
 Type=notify
 ExecStart=/usr/bin/transmission-daemon -f --log-error
 ExecReload=/bin/kill -s HUP $MAINPID
+NoNewPrivileges=true
 
 [Install]
 WantedBy=multi-user.target