diff --git a/dhcp.spec b/dhcp.spec
index 2c289f2..a219fec 100644
--- a/dhcp.spec
+++ b/dhcp.spec
@@ -22,7 +22,7 @@
 Summary:  Dynamic host configuration protocol software
 Name:     dhcp
 Version:  4.2.3
-Release:  13.%{patchver}%{?dist}
+Release:  14.%{patchver}%{?dist}
 # NEVER CHANGE THE EPOCH on this package.  The previous maintainer (prior to
 # dcantrell maintaining the package) made incorrect use of the epoch and
 # that's why it is at 12 now.  It should have never been used, but it was.
@@ -643,6 +643,9 @@ fi
 
 
 %changelog
+* Tue Jan 17 2012 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-14.P2
+- use PrivateTmp=true in service files (#782499)
+
 * Fri Jan 13 2012 Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-13.P2
 - 4.2.3-P2: fix for CVE-2011-4868 (#781246)
 - clean up old Provides and Obsoletes
diff --git a/dhcpd.service b/dhcpd.service
index c9a73a1..8cc1420 100644
--- a/dhcpd.service
+++ b/dhcpd.service
@@ -5,6 +5,7 @@ After=syslog.target network.target
 [Service]
 EnvironmentFile=/etc/sysconfig/dhcpd
 ExecStart=/usr/sbin/dhcpd -d -user dhcpd -group dhcpd --no-pid $DHCPDARGS
+PrivateTmp=true
 
 [Install]
 WantedBy=multi-user.target
diff --git a/dhcpd6.service b/dhcpd6.service
index ddaa104..8621eca 100644
--- a/dhcpd6.service
+++ b/dhcpd6.service
@@ -5,6 +5,7 @@ After=syslog.target network.target
 [Service]
 EnvironmentFile=/etc/sysconfig/dhcpd6
 ExecStart=/usr/sbin/dhcpd -d -6 -cf /etc/dhcp/dhcpd6.conf -user dhcpd -group dhcpd --no-pid $DHCPDARGS
+PrivateTmp=true
 
 [Install]
 WantedBy=multi-user.target