PeterCxy/irqbalance
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

drop NoNewPrivs from irqbalance service

Browse source 
A recent update to libcapng is issuing an error in the system log,
caused by the fact that irqbalance attempts to drop capabilities when
the systemd service unit has already done so for us.  Since irqbalance
drops the caps correctly, theres really no need for us to do so via
systemd as well.  So lets drop NoNewCaps in the service unit.

Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
This commit is contained in:
Neil Horman 2021-05-12 09:26:10 -04:00
parent 1cac563adc
commit 43751dfc7f
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
misc/irqbalance.service
View file

@ -9,7 +9,6 @@ EnvironmentFile=-/usr/lib/irqbalance/defaults.env
EnvironmentFile=-/path/to/irqbalance.env
ExecStart=/usr/sbin/irqbalance --foreground $IRQBALANCE_ARGS
CapabilityBoundingSet=
NoNewPrivileges=yes
ReadOnlyPaths=/
ReadWritePaths=/proc/irq
RestrictAddressFamilies=AF_UNIX