diff options
| author | Daniel Mack <github@zonque.org> | 2015-07-27 18:18:16 +0200 |
|---|---|---|
| committer | Daniel Mack <github@zonque.org> | 2015-07-27 18:18:16 +0200 |
| commit | 34efe1d812fc0b709f7180e4da6a4399097517c8 (patch) | |
| tree | 81f300c8cd095c0d55a0e14c05afb1798ac072b2 | |
| parent | e57eaef8a187762ca92838c24b9b6460878a800c (diff) | |
| parent | b242faae06034c981927f48a80817aae04e5e7ff (diff) | |
Merge pull request #738 from poettering/machined-caps
units: add more caps to machined
| -rw-r--r-- | units/systemd-machined.service.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/units/systemd-machined.service.in b/units/systemd-machined.service.in index 19c33959d6..fb1f383cdc 100644 --- a/units/systemd-machined.service.in +++ b/units/systemd-machined.service.in @@ -15,7 +15,7 @@ After=machine.slice [Service] ExecStart=@rootlibexecdir@/systemd-machined BusName=org.freedesktop.machine1 -CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE +CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER CAP_FSETID WatchdogSec=1min # Note that machined cannot be placed in a mount namespace, since it |