From c6117d4f8e413a6dee4eba114db022d61f67de09 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Mon, 8 Jul 2019 21:05:35 +0500 Subject: [PATCH] systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG --- systemd/softether-vpnbridge.service | 2 +- systemd/softether-vpnclient.service | 2 +- systemd/softether-vpnserver.service | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/systemd/softether-vpnbridge.service b/systemd/softether-vpnbridge.service index 25f44927..c9fa2b73 100644 --- a/systemd/softether-vpnbridge.service +++ b/systemd/softether-vpnbridge.service @@ -17,7 +17,7 @@ ProtectHome=yes ProtectSystem=full ReadOnlyDirectories=/ ReadWriteDirectories=-${CPACK_PACKAGING_INSTALL_PREFIX}/libexec/softether/vpnbridge -CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID [Install] WantedBy=multi-user.target diff --git a/systemd/softether-vpnclient.service b/systemd/softether-vpnclient.service index d5b9aecd..ff47b2a4 100644 --- a/systemd/softether-vpnclient.service +++ b/systemd/softether-vpnclient.service @@ -17,7 +17,7 @@ ProtectHome=yes ProtectSystem=full ReadOnlyDirectories=/ ReadWriteDirectories=-${CPACK_PACKAGING_INSTALL_PREFIX}/libexec/softether/vpnclient -CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID [Install] WantedBy=multi-user.target diff --git a/systemd/softether-vpnserver.service b/systemd/softether-vpnserver.service index f2ef53fe..c22ca58e 100644 --- a/systemd/softether-vpnserver.service +++ b/systemd/softether-vpnserver.service @@ -18,7 +18,7 @@ ProtectHome=yes ProtectSystem=full ReadOnlyDirectories=/ ReadWriteDirectories=-${CPACK_PACKAGING_INSTALL_PREFIX}/libexec/softether/vpnserver -CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID [Install] WantedBy=multi-user.target