Don't set "NoNewPrivileges" in systemd unit

The "NoNewPrivileges" setting breaks some PAM and extauth setups. Fixes #1281.
2016-10-19 23:29:46 +02:00 · 2016-10-19 23:29:46 +02:00 · c3b62d2f75
parent f56840a682
commit c3b62d2f75
1 changed files with 0 additions and 3 deletions
--- a/ejabberd.service.template
+++ b/ejabberd.service.template
@ -12,11 +12,8 @@ ExecStop=@ctlscriptpath@/ejabberdctl stop
 ExecReload=@ctlscriptpath@/ejabberdctl reload_config
 Type=oneshot
 RemainAfterExit=yes
-# The CAP_DAC_OVERRIDE capability is required for pam authentication to work
-CapabilityBoundingSet=CAP_DAC_OVERRIDE
 PrivateDevices=true
 ProtectSystem=full
-NoNewPrivileges=true

 [Install]
 WantedBy=multi-user.target