From af84a30adc0a9da145b919f9599e76d1becfc114 Mon Sep 17 00:00:00 2001 From: Steve Muskiewicz Date: Wed, 30 Jun 2021 11:48:45 -0400 Subject: [PATCH] Update `softether-vpnserver.service` files: * change `ReadOnlyDirectories` -> `ReadOnlyPaths` and `ReadWriteDirectories` -> `ReadWritePaths` * add `ReadWritePaths` for other necessary directories (this should address #1111) --- systemd/softether-vpnserver.service | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/systemd/softether-vpnserver.service b/systemd/softether-vpnserver.service index 15427ad6..37adff98 100644 --- a/systemd/softether-vpnserver.service +++ b/systemd/softether-vpnserver.service @@ -16,8 +16,11 @@ Restart=on-failure PrivateTmp=yes ProtectHome=yes ProtectSystem=full -ReadOnlyDirectories=/ -ReadWriteDirectories=-@DIR@/softether/vpnserver +ReadOnlyPaths=/ +ReadWritePaths=-@DIR@/softether/vpnserver +ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/run/softether +ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/var/log/softether +ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/var/lib/softether CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID [Install]