diff --git a/NEWS b/NEWS
index d0590e07ac1..344f21df72f 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,8 @@
+udev 176
+========
+The systemd socket files use PassCred=yes, which requires systemd
+version 38.
+
 udev 175
 ========
 Bugfixes.
diff --git a/systemd/udev-control.socket b/systemd/udev-control.socket
index 858ddffd38a..af7ef9a1d76 100644
--- a/systemd/udev-control.socket
+++ b/systemd/udev-control.socket
@@ -6,3 +6,5 @@ ConditionCapability=CAP_MKNOD
 [Socket]
 Service=udev.service
 ListenSequentialPacket=/run/udev/control
+SocketMode=0600
+PassCred=yes
diff --git a/systemd/udev-kernel.socket b/systemd/udev-kernel.socket
index 1c5545378ed..4a8f5998408 100644
--- a/systemd/udev-kernel.socket
+++ b/systemd/udev-kernel.socket
@@ -7,3 +7,4 @@ ConditionCapability=CAP_MKNOD
 Service=udev.service
 ReceiveBuffer=134217728
 ListenNetlink=kobject-uevent 1
+PassCred=yes