Browse Source

Update `softether-vpnserver.service` files:

 * change `ReadOnlyDirectories` -> `ReadOnlyPaths` and `ReadWriteDirectories` -> `ReadWritePaths`

 * add `ReadWritePaths` for other necessary directories (this should address #1111)
Steve Muskiewicz 4 years ago
parent
commit
af84a30adc
1 changed files with 5 additions and 2 deletions
  1. 5 2
      systemd/softether-vpnserver.service

+ 5 - 2
systemd/softether-vpnserver.service

@@ -16,8 +16,11 @@ Restart=on-failure
 PrivateTmp=yes
 ProtectHome=yes
 ProtectSystem=full
-ReadOnlyDirectories=/
-ReadWriteDirectories=-@DIR@/softether/vpnserver
+ReadOnlyPaths=/
+ReadWritePaths=-@DIR@/softether/vpnserver
+ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/run/softether
+ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/var/log/softether
+ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/var/lib/softether
 CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID
 
 [Install]