25
1
mirror of https://github.com/processone/ejabberd.git synced 2024-11-28 16:34:13 +01:00

Don't set "NoNewPrivileges" in systemd unit

The "NoNewPrivileges" setting breaks some PAM and extauth setups.

Fixes #1281.
This commit is contained in:
Holger Weiss 2016-10-19 23:29:46 +02:00
parent f56840a682
commit c3b62d2f75

View File

@ -12,11 +12,8 @@ ExecStop=@ctlscriptpath@/ejabberdctl stop
ExecReload=@ctlscriptpath@/ejabberdctl reload_config
Type=oneshot
RemainAfterExit=yes
# The CAP_DAC_OVERRIDE capability is required for pam authentication to work
CapabilityBoundingSet=CAP_DAC_OVERRIDE
PrivateDevices=true
ProtectSystem=full
NoNewPrivileges=true
[Install]
WantedBy=multi-user.target