Don't use ProtectHome by default in the systemd unit

Some people might put media in /home/…/
2019-06-02 16:05:47 +02:00
parent 0878a71cc7
commit 40a5150b6e
1 changed files with 4 additions and 1 deletions
@@ -29,7 +29,6 @@ PrivateDevices=yes
 PrivateTmp=yes
 PrivateUsers=yes
 ProtectControlGroups=yes
-ProtectHome=true
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
@@ -44,6 +43,10 @@ ProtectSystem=full
 #ProtectSystem=strict
 #ReadWritePaths=/var/airsonic

+# You can uncomment the following line if you don't have any media
+# in /home/…. This will prevent airsonic from ever read/write anything there.
+#ProtectHome=true
+
 # You can uncomment the following line if you're not using the OpenJDK.
 # This will prevent processes from having a memory zone that is both writeable
 # and executeable, making hacker's lifes a bit harder.