MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make the systemd unit compatible with tomcat9

Browse Source 
- Use ReadWritePaths by default, since it doesn't
  cause any harm
- Rephrase the ProtectSystem comment, to make it more clear
- Fix verbs in a comment
This commit is contained in:
jvoisin
2019-09-03 04:54:43 -05:00
committed by Evan Harris
parent 83ca97e21c
commit eb4c5a04ff
1 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
contrib/airsonic.service
+6 -7
View File
@@ -35,16 +35,15 @@ RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
RestrictNamespaces=yes RestrictNamespaces=yes
RestrictRealtime=yes RestrictRealtime=yes
SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap
ReadWritePaths=/var/airsonic
# You can change the following line to `strict` instead of `full`
# if you don't want airsonic to be able to
# write anything on your filesystem outside of AIRSONIC_HOME.
ProtectSystem=full ProtectSystem=full
# You can uncomment the following line if you don't want airsonic to be able to
# write anything on your filesystem outside of AIRSONIC_HOME.
# Don't forget to remove the other `ProtectSystem` line above.
#ProtectSystem=strict
#ReadWritePaths=/var/airsonic
# You can uncomment the following line if you don't have any media # You can uncomment the following line if you don't have any media
# in /home/…. This will prevent airsonic from ever read/write anything there. # in /home/…. This will prevent airsonic from ever reading/writing anything there.
#ProtectHome=true #ProtectHome=true
# You can uncomment the following line if you're not using the OpenJDK. # You can uncomment the following line if you're not using the OpenJDK.