diff --git a/dnsmasq.changes b/dnsmasq.changes
index 1143440..054571f 100644
--- a/dnsmasq.changes
+++ b/dnsmasq.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed Mar 26 16:56:34 UTC 2014 - crrodriguez@opensuse.org
+
+- dnsmasq.service: Set PrivateDevices=yes so we run in a 
+  separate namespace with the bare minimum device nodes isolated
+  from the host.
+
 -------------------------------------------------------------------
 Mon Apr 22 11:34:35 UTC 2013 - meissner@suse.com
 
diff --git a/dnsmasq.service b/dnsmasq.service
index 536529d..94ecc40 100644
--- a/dnsmasq.service
+++ b/dnsmasq.service
@@ -8,6 +8,7 @@ BusName=uk.org.thekelleys.dnsmasq
 ExecStartPre=/usr/sbin/dnsmasq --test
 ExecStart=/usr/sbin/dnsmasq --log-async --enable-dbus --keep-in-foreground
 ExecReload=/bin/kill -HUP $MAINPID
+PrivateDevices=yes
 
 [Install]
 WantedBy=multi-user.target
diff --git a/dnsmasq.spec b/dnsmasq.spec
index bd04e5e..49d5018 100644
--- a/dnsmasq.spec
+++ b/dnsmasq.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package dnsmasq
 #
-# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed