فهرست منبع

Granting CAP_SYS_ADMIN capability

Hideki Saito 10 سال پیش
والد
کامیت
04cfcd47ab
3فایلهای تغییر یافته به همراه3 افزوده شده و 5 حذف شده
  1. 1 2
      systemd/softether-vpnbridge.service
  2. 1 1
      systemd/softether-vpnclient.service
  3. 1 2
      systemd/softether-vpnserver.service

+ 1 - 2
systemd/softether-vpnbridge.service

@@ -16,8 +16,7 @@ ProtectHome=yes
 ProtectSystem=full
 ReadOnlyDirectories=/
 ReadWriteDirectories=-/opt/vpnbridge
-CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE
-
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN
 
 [Install]
 WantedBy=multi-user.target

+ 1 - 1
systemd/softether-vpnclient.service

@@ -17,7 +17,7 @@ ProtectHome=yes
 ProtectSystem=full
 ReadOnlyDirectories=/
 ReadWriteDirectories=-/opt/vpnclient
-CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN
 
 [Install]
 WantedBy=multi-user.target

+ 1 - 2
systemd/softether-vpnserver.service

@@ -17,8 +17,7 @@ ProtectHome=yes
 ProtectSystem=full
 ReadOnlyDirectories=/
 ReadWriteDirectories=-/opt/vpnserver
-CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE 
-
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN
 
 [Install]
 WantedBy=multi-user.target