MightyPork
/
airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Move PrivateDevices to a separate section and add a comment

Browse Source 
Signed-off-by: Robert Sprunk <git@sprunk.me>
master
Robert Sprunk 5 years ago
parent 856030d5f9
commit d063688422
1 changed files with 4 additions and 1 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 5
      contrib/airsonic.service

5
contrib/airsonic.service
Unescape View File

@ -26,7 +26,6 @@ Group=airsonic
DevicePolicy=closed DevicePolicy=closed
DeviceAllow=char-alsa rw DeviceAllow=char-alsa rw
NoNewPrivileges=yes NoNewPrivileges=yes
#PrivateDevices=yes
PrivateTmp=yes PrivateTmp=yes
PrivateUsers=yes PrivateUsers=yes
ProtectControlGroups=yes ProtectControlGroups=yes
@ -38,6 +37,10 @@ RestrictRealtime=yes
SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap
ReadWritePaths=/var/airsonic ReadWritePaths=/var/airsonic
# You can uncomment the following line if you're not using the jukebox
# This will prevent airsonic from accessing any real (physical) devices
#PrivateDevices=yes
# You can change the following line to `strict` instead of `full` # You can change the following line to `strict` instead of `full`
# if you don't want airsonic to be able to # if you don't want airsonic to be able to
# write anything on your filesystem outside of AIRSONIC_HOME. # write anything on your filesystem outside of AIRSONIC_HOME.

Write Preview
Loading…
Cancel
Save