I think it would be nice to modify the service file to run as non-root: [Service] ... User=vnstat CapabilityBoundingSet=
Untested. Also it would be required to change the ownership of files in /var/lib/vnstat, but this should be done by the install script. -- To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120701123709.gf9...@in.waw.pl