From 7f8ae95a5f27549fcf9ce7e73873b09f7eeffec2 Mon Sep 17 00:00:00 2001 From: Y Date: Sun, 18 Feb 2018 15:38:14 +0100 Subject: [PATCH] remove Capabilities limit: it causes failure on external commands --- extra/systemd/pyruse-boot@.service | 1 - extra/systemd/pyruse.service | 1 - 2 files changed, 2 deletions(-) diff --git a/extra/systemd/pyruse-boot@.service b/extra/systemd/pyruse-boot@.service index 42af667..bd8459a 100644 --- a/extra/systemd/pyruse-boot@.service +++ b/extra/systemd/pyruse-boot@.service @@ -5,7 +5,6 @@ Description=Initialization of pyruse module %I Type=oneshot ExecStart=/usr/bin/pyruse-boot "%I" WorkingDirectory=/etc/pyruse -CapabilityBoundingSet=CAP_SYS_CHROOT NoNewPrivileges=true PrivateDevices=yes PrivateTmp=yes diff --git a/extra/systemd/pyruse.service b/extra/systemd/pyruse.service index 1b99850..73cc33f 100644 --- a/extra/systemd/pyruse.service +++ b/extra/systemd/pyruse.service @@ -4,7 +4,6 @@ Description=Route systemd-journal logs to filters and actions (ban, report…) [Service] ExecStart=/usr/bin/pyruse WorkingDirectory=/etc/pyruse -CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT NoNewPrivileges=true PrivateDevices=yes PrivateTmp=yes