Chapril/xmpp.chapril.org-ejabberd
25
1
Fork 0
mirror of https://github.com/processone/ejabberd.git synced 2024-11-28 16:34:13 +01:00
Code Releases Activity

Don't set "NoNewPrivileges" in systemd unit

Browse Source 
The "NoNewPrivileges" setting breaks some PAM and extauth setups.

Fixes #1281.
This commit is contained in:
Holger Weiss 2016-10-19 23:29:46 +02:00
parent f56840a682
commit c3b62d2f75
1 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ejabberd.service.template
View File

@ -12,11 +12,8 @@ ExecStop=@ctlscriptpath@/ejabberdctl stop
ExecReload=@ctlscriptpath@/ejabberdctl reload_config ExecReload=@ctlscriptpath@/ejabberdctl reload_config
Type=oneshot Type=oneshot
RemainAfterExit=yes RemainAfterExit=yes
# The CAP_DAC_OVERRIDE capability is required for pam authentication to work
CapabilityBoundingSet=CAP_DAC_OVERRIDE
PrivateDevices=true PrivateDevices=true
ProtectSystem=full ProtectSystem=full
NoNewPrivileges=true
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target