MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge remote-tracking branch 'origin/pr/1406'

Browse Source
This commit is contained in:
Andrew DeMaria
2019-12-16 19:30:13 -07:00
parent 2f75254010 d063688422
commit dfac91fec4
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
contrib/airsonic.service
+5 -1
View File
@@ -24,8 +24,8 @@ Group=airsonic
# See https://www.freedesktop.org/software/systemd/man/systemd.exec.html # See https://www.freedesktop.org/software/systemd/man/systemd.exec.html
# for details # for details
DevicePolicy=closed DevicePolicy=closed
DeviceAllow=char-alsa rw
NoNewPrivileges=yes NoNewPrivileges=yes
PrivateDevices=yes
PrivateTmp=yes PrivateTmp=yes
PrivateUsers=yes PrivateUsers=yes
ProtectControlGroups=yes ProtectControlGroups=yes
@@ -37,6 +37,10 @@ RestrictRealtime=yes
SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap
ReadWritePaths=/var/airsonic ReadWritePaths=/var/airsonic
# You can uncomment the following line if you're not using the jukebox
# This will prevent airsonic from accessing any real (physical) devices
#PrivateDevices=yes
# You can change the following line to `strict` instead of `full` # You can change the following line to `strict` instead of `full`
# if you don't want airsonic to be able to # if you don't want airsonic to be able to
# write anything on your filesystem outside of AIRSONIC_HOME. # write anything on your filesystem outside of AIRSONIC_HOME.