From 108cb5736994b95fcd62e93f070268f733f22109 Mon Sep 17 00:00:00 2001 From: Mahendra Paipuri Date: Tue, 20 Feb 2024 13:44:36 +0100 Subject: [PATCH] chore: Correct systemd directives in unit examples Signed-off-by: Mahendra Paipuri --- init/systemd/batchjob_exporter_with_caps.service | 2 +- init/systemd/batchjob_stats_server.service | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/init/systemd/batchjob_exporter_with_caps.service b/init/systemd/batchjob_exporter_with_caps.service index ca262308..e544f551 100644 --- a/init/systemd/batchjob_exporter_with_caps.service +++ b/init/systemd/batchjob_exporter_with_caps.service @@ -17,7 +17,7 @@ RestartSec=1 StartLimitInterval=0 AmbientCapabilities=CAP_SYS_PTRACE CAP_DAC_READ_SEARCH -BoundingCapabilities=CAP_SYS_PTRACE CAP_DAC_READ_SEARCH +CapabilityBoundingSet=CAP_SYS_PTRACE CAP_DAC_READ_SEARCH ProtectSystem=strict ProtectControlGroups=true diff --git a/init/systemd/batchjob_stats_server.service b/init/systemd/batchjob_stats_server.service index b4622da3..fe33faa1 100644 --- a/init/systemd/batchjob_stats_server.service +++ b/init/systemd/batchjob_stats_server.service @@ -27,7 +27,7 @@ RestartSec=1 StartLimitInterval=0 AmbientCapabilities=CAP_SETUID CAP_SETGID -BoundingCapabilities=CAP_SETUID CAP_SETGID +CapabilityBoundingSet=CAP_SETUID CAP_SETGID ProtectHome=read-only ReadWritePaths=/var/lib/ceems /nfs/data/backup/ceems