diff options
| author | minibikini <egor@kislitsyn.com> | 2020-10-27 18:59:19 +0000 |
|---|---|---|
| committer | minibikini <egor@kislitsyn.com> | 2020-10-27 18:59:19 +0000 |
| commit | 1bfd8528bbc71c8c34253eb245de7df498064fb4 (patch) | |
| tree | 97387260c85bb6b5505924de806110d8f71eb3fc /installation | |
| parent | 18a91d85e59eb67a2d58a28aae732c34b75ebe97 (diff) | |
| parent | 5aff4799515c141cb0a42686733b2f40faba6f86 (diff) | |
| download | pleroma-1bfd8528bbc71c8c34253eb245de7df498064fb4.tar.gz pleroma-1bfd8528bbc71c8c34253eb245de7df498064fb4.zip | |
Merge branch 'develop' into 'feature/local-only-scope'
# Conflicts:
# CHANGELOG.md
Diffstat (limited to 'installation')
| -rw-r--r-- | installation/pleroma.service | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/installation/pleroma.service b/installation/pleroma.service index ee00a3b7a..63e83ed6e 100644 --- a/installation/pleroma.service +++ b/installation/pleroma.service @@ -31,8 +31,6 @@ ProtectHome=true ProtectSystem=full ; Sets up a new /dev mount for the process and only adds API pseudo devices like /dev/null, /dev/zero or /dev/random but not physical devices. Disabled by default because it may not work on devices like the Raspberry Pi. PrivateDevices=false -; Ensures that the service process and all its children can never gain new privileges through execve(). -NoNewPrivileges=true ; Drops the sysadmin capability from the daemon. CapabilityBoundingSet=~CAP_SYS_ADMIN |