diff options
| author | Hideki Saito <hideki@hidekisaito.com> | 2015-06-22 21:39:12 +0300 |
|---|---|---|
| committer | Hideki Saito <hideki@hidekisaito.com> | 2015-06-22 21:39:12 +0300 |
| commit | bccc18b82531f9271752e5ca1b104a43b8d04de4 (patch) | |
| tree | d4de6e1ecd45dbc25b687780e109f870838e77a0 /systemd | |
| parent | 04cfcd47ab4027e29d830cb8cdcf92b7dfc45003 (diff) | |
Granting CAP_SETUID as it seems to be needed
Diffstat (limited to 'systemd')
| -rw-r--r-- | systemd/softether-vpnbridge.service | 2 | ||||
| -rw-r--r-- | systemd/softether-vpnclient.service | 2 | ||||
| -rw-r--r-- | systemd/softether-vpnserver.service | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/systemd/softether-vpnbridge.service b/systemd/softether-vpnbridge.service index f1d6b894..2f508820 100644 --- a/systemd/softether-vpnbridge.service +++ b/systemd/softether-vpnbridge.service @@ -16,7 +16,7 @@ ProtectHome=yes ProtectSystem=full ReadOnlyDirectories=/ ReadWriteDirectories=-/opt/vpnbridge -CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID [Install] WantedBy=multi-user.target diff --git a/systemd/softether-vpnclient.service b/systemd/softether-vpnclient.service index b31267f5..1e9dbd0e 100644 --- a/systemd/softether-vpnclient.service +++ b/systemd/softether-vpnclient.service @@ -17,7 +17,7 @@ ProtectHome=yes ProtectSystem=full ReadOnlyDirectories=/ ReadWriteDirectories=-/opt/vpnclient -CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID [Install] WantedBy=multi-user.target diff --git a/systemd/softether-vpnserver.service b/systemd/softether-vpnserver.service index 34b1c828..951b13db 100644 --- a/systemd/softether-vpnserver.service +++ b/systemd/softether-vpnserver.service @@ -17,7 +17,7 @@ ProtectHome=yes ProtectSystem=full ReadOnlyDirectories=/ ReadWriteDirectories=-/opt/vpnserver -CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID [Install] WantedBy=multi-user.target |