Merge pull request #738 from poettering/machined-caps
units: add more caps to machined
This commit is contained in:
commit
34efe1d812
|
@ -15,7 +15,7 @@ After=machine.slice
|
|||
[Service]
|
||||
ExecStart=@rootlibexecdir@/systemd-machined
|
||||
BusName=org.freedesktop.machine1
|
||||
CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE
|
||||
CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER CAP_FSETID
|
||||
WatchdogSec=1min
|
||||
|
||||
# Note that machined cannot be placed in a mount namespace, since it
|
||||
|
|
Loading…
Reference in a new issue