diff --git a/etc/systemd/system/tor.service.d/override.conf b/etc/systemd/system/tor.service.d/override.conf
new file mode 100644
index 00000000..c250b48d
--- /dev/null
+++ b/etc/systemd/system/tor.service.d/override.conf
@@ -0,0 +1,3 @@
+[Service]
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+NoNewPrivileges=yes