diff --git a/res/miracle-wifid.service.cmake b/res/miracle-wifid.service.cmake
index 0edc683..3ffab9a 100644
--- a/res/miracle-wifid.service.cmake
+++ b/res/miracle-wifid.service.cmake
@@ -6,7 +6,13 @@ Requires=network.target
 [Service]
 BusName=org.freedesktop.miracle.wifi
 Environment=PATH=/sbin:/usr/bin
-ExecStart=@CMAKE_INSTALL_PREFIX@/bin/miracle-wifid --use-dev --log-level trace --lazy-managed
+ExecStart=@CMAKE_INSTALL_PREFIX@/bin/miracle-wifid \
+	--use-dev \
+	--log-level trace \
+	--lazy-managed
+CapabilityBoundingSet=CAP_NET_ADMIN \
+	CAP_NET_BIND_SERVICE \
+	CAP_NET_RAW
 
 [Install]
 WantedBy=multi-user.target
diff --git a/res/miracle-wifid.service.in b/res/miracle-wifid.service.in
index 8dd5871..7430a8c 100644
--- a/res/miracle-wifid.service.in
+++ b/res/miracle-wifid.service.in
@@ -10,6 +10,9 @@ ExecStart=@exec_path@/miracle-wifid \
         --use-dev \
         --log-level trace \
         --lazy-managed
+CapabilityBoundingSet=CAP_NET_ADMIN \
+	CAP_NET_BIND_SERVICE \
+	CAP_NET_RAW
 
 [Install]
 WantedBy=multi-user.target