From 6a0ddc20efb5d5e79cc64630d3fdeddb8101149f Mon Sep 17 00:00:00 2001
From: cofob <49928332+cofob@users.noreply.github.com>
Date: Wed, 21 Jul 2021 17:57:59 +0700
Subject: [PATCH] Allow yggdrasil bind to ports <1024

---
 contrib/systemd/yggdrasil.service | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/systemd/yggdrasil.service b/contrib/systemd/yggdrasil.service
index 3002e61..27d2790 100644
--- a/contrib/systemd/yggdrasil.service
+++ b/contrib/systemd/yggdrasil.service
@@ -10,7 +10,7 @@ Group=yggdrasil
 ProtectHome=true
 ProtectSystem=true
 SyslogIdentifier=yggdrasil
-CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE
 ExecStartPre=+-/sbin/modprobe tun
 ExecStart=/usr/bin/yggdrasil -useconffile /etc/yggdrasil.conf
 ExecReload=/bin/kill -HUP $MAINPID