systemd: downgrade ProtectSystem to "true" from "full"

this should enable interacting with tools such as ufw

Closes: #927883
This commit is contained in:
Leo Antunes
2021-11-02 23:35:15 +01:00
parent 521ba0fe1b
commit 688ef43fba

View File

@@ -10,7 +10,7 @@ ExecStart=/usr/sbin/knockd $KNOCKD_OPTS
ExecReload=/bin/kill -HUP $MAINPID
KillMode=mixed
SuccessExitStatus=0 2 15
ProtectSystem=full
ProtectSystem=true
CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN CAP_SYS_MODULE
[Install]