shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2025-02-02 09:47:03 +03:00
Code

add CAP_LINUX_IMMUTABLE to systemd-machined, so it can handle machinectl read-only requests

Browse Source 
Without this, the 'machinectl read-only ...' command always fails.
This commit is contained in:
Dan Streetman 2022-09-16 10:50:59 -04:00 committed by Luca Boccassi
parent dd35a61caf
commit 137d162c42
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
units/systemd-machined.service.in
View File

@ -18,7 +18,7 @@ RequiresMountsFor=/var/lib/machines
[Service] [Service]
BusName=org.freedesktop.machine1 BusName=org.freedesktop.machine1
CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_LINUX_IMMUTABLE
ExecStart={{ROOTLIBEXECDIR}}/systemd-machined ExecStart={{ROOTLIBEXECDIR}}/systemd-machined
IPAddressDeny=any IPAddressDeny=any
LockPersonality=yes LockPersonality=yes