diff --git a/sources b/sources
index d66836e..b1a37b3 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-59771fe2d098893fe955edfb8b13401f  tor-0.2.8.7.tar.gz
-737e18292daa87355dd86751dc326cd7  tor-0.2.8.7.tar.gz.asc
+a9627e1655cab3a3df0da9b0f74aa21b  tor-0.2.8.8.tar.gz
+c1ddd749f8a0f22f12274971bebfb0fd  tor-0.2.8.8.tar.gz.asc
diff --git a/tor.service b/tor.service
index 78d4a72..84bc50c 100644
--- a/tor.service
+++ b/tor.service
@@ -28,7 +28,7 @@ ReadOnlyDirectories=/var
 ReadWriteDirectories=/run/tor
 ReadWriteDirectories=/var/lib/tor
 ReadWriteDirectories=/var/log/tor
-CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH
 PermissionsStartOnly=yes
 
 [Install]
diff --git a/tor.spec b/tor.spec
index 84d4877..66ec0b8 100644
--- a/tor.spec
+++ b/tor.spec
@@ -19,7 +19,7 @@
 %endif
 
 Name:       tor
-Version:    0.2.8.7
+Version:    0.2.8.8
 Release:    1%{?dist}
 Group:      System Environment/Daemons
 License:    BSD
@@ -172,6 +172,9 @@ fi
 
 
 %changelog
+* Sun Oct 02 2016 Jamie Nguyen <jamielinux@fedoraproject.org> - 0.2.8.8-1
+- update to upstream release 0.2.8.8
+
 * Thu Aug 25 2016 Jamie Nguyen <jamielinux@fedoraproject.org> - 0.2.8.7-1
 - update to upstream release 0.2.8.7
 
diff --git a/tor@.service b/tor@.service
index 79cc99e..0406abc 100644
--- a/tor@.service
+++ b/tor@.service
@@ -28,7 +28,7 @@ ReadOnlyDirectories=/var
 ReadWriteDirectories=/run/tor
 ReadWriteDirectories=/var/lib/tor
 ReadWriteDirectories=/var/log/tor
-CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH
 PermissionsStartOnly=yes
 
 [Install]