Don't let systemd hide /home and /tmp

Admins might expect ejabberd to be able to access data below /home or
/tmp.  For example, they might use those locations to dump/restore
Mnesia backups, or as a document root for mod_http_fileserver or
mod_http_upload.

Fixes #1297.
This commit is contained in:
Holger Weiss 2016-10-19 23:11:26 +02:00
parent 3ec68a4ecf
commit f56840a682
1 changed files with 0 additions and 2 deletions

View File

@ -14,9 +14,7 @@ Type=oneshot
RemainAfterExit=yes
# The CAP_DAC_OVERRIDE capability is required for pam authentication to work
CapabilityBoundingSet=CAP_DAC_OVERRIDE
PrivateTmp=true
PrivateDevices=true
ProtectHome=true
ProtectSystem=full
NoNewPrivileges=true