yetangitu/ejabberd
1
0
Fork 0
mirror of https://github.com/processone/ejabberd synced 2025-10-05 19:42:11 +02:00
Code Issues Releases Wiki Activity

Don't set "NoNewPrivileges" in systemd unit

Browse source 
The "NoNewPrivileges" setting breaks some PAM and extauth setups.

Fixes #1281.
This commit is contained in:
Holger Weiss 2016-10-19 23:29:46 +02:00
parent f56840a682
commit c3b62d2f75
1 changed files with 0 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
ejabberd.service.template
View file

@ -12,11 +12,8 @@ ExecStop=@ctlscriptpath@/ejabberdctl stop
ExecReload=@ctlscriptpath@/ejabberdctl reload_config
Type=oneshot
RemainAfterExit=yes
# The CAP_DAC_OVERRIDE capability is required for pam authentication to work
CapabilityBoundingSet=CAP_DAC_OVERRIDE
PrivateDevices=true
ProtectSystem=full
NoNewPrivileges=true
[Install]
WantedBy=multi-user.target