diff --git a/release/config/systemd/v2ray.service b/release/config/systemd/v2ray.service
index 31884040c..c8dcbfd2f 100644
--- a/release/config/systemd/v2ray.service
+++ b/release/config/systemd/v2ray.service
@@ -14,7 +14,8 @@ Type=simple
 # More discussion at https://github.com/v2ray/v2ray-core/issues/1011
 User=root
 #User=v2ray
-#AmbientCapabilities=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW
+NoNewPrivileges=yes
 ExecStart=/usr/bin/v2ray/v2ray -config /etc/v2ray/config.json
 Restart=on-failure
 # Don't restart in the case of configuration error