MightyPork
/
airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't use ProtectHome by default in the systemd unit

Browse Source 
Some people might put media in /home/…/
master
jvoisin 7 years ago
parent 0878a71cc7
commit 40a5150b6e
1 changed files with 4 additions and 1 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 5
      contrib/airsonic.service

5
contrib/airsonic.service
Unescape View File

@ -29,7 +29,6 @@ PrivateDevices=yes
PrivateTmp=yes PrivateTmp=yes
PrivateUsers=yes PrivateUsers=yes
ProtectControlGroups=yes ProtectControlGroups=yes
ProtectHome=true
ProtectKernelModules=yes ProtectKernelModules=yes
ProtectKernelTunables=yes ProtectKernelTunables=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
@ -44,6 +43,10 @@ ProtectSystem=full
#ProtectSystem=strict #ProtectSystem=strict
#ReadWritePaths=/var/airsonic #ReadWritePaths=/var/airsonic
# You can uncomment the following line if you don't have any media
# in /home/…. This will prevent airsonic from ever read/write anything there.
#ProtectHome=true
# You can uncomment the following line if you're not using the OpenJDK. # You can uncomment the following line if you're not using the OpenJDK.
# This will prevent processes from having a memory zone that is both writeable # This will prevent processes from having a memory zone that is both writeable
# and executeable, making hacker's lifes a bit harder. # and executeable, making hacker's lifes a bit harder.

Write Preview
Loading…
Cancel
Save