Add ReadWritePaths directive to service files (#17178)

* Update mastodon-web.service

* Update mastodon-streaming.service

* Update mastodon-sidekiq.service
This commit is contained in:
Lerk 2021-12-22 03:34:12 +00:00 committed by GitHub
parent 512bc9db7d
commit 56c55ab9f6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 3 additions and 0 deletions

View file

@ -47,6 +47,7 @@ SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileg
SystemCallFilter=@chown SystemCallFilter=@chown
SystemCallFilter=pipe SystemCallFilter=pipe
SystemCallFilter=pipe2 SystemCallFilter=pipe2
ReadWritePaths=/home/mastodon/live
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -45,6 +45,7 @@ SystemCallArchitectures=native
SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @memlock @mount @obsolete @privileged @resources @setuid SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @memlock @mount @obsolete @privileged @resources @setuid
SystemCallFilter=pipe SystemCallFilter=pipe
SystemCallFilter=pipe2 SystemCallFilter=pipe2
ReadWritePaths=/home/mastodon/live
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -47,6 +47,7 @@ SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileg
SystemCallFilter=@chown SystemCallFilter=@chown
SystemCallFilter=pipe SystemCallFilter=pipe
SystemCallFilter=pipe2 SystemCallFilter=pipe2
ReadWritePaths=/home/mastodon/live
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target