From 2a512fdf57055a2ce4ae02256dfabb5b74d2abd6 Mon Sep 17 00:00:00 2001 From: Alexey Tikhonov Date: Mon, 22 Mar 2021 15:18:57 +0100 Subject: [PATCH] systemd configs: add CAP_DAC_OVERRIDE for ifp in certain case Commit fd7ce7b3de9647eb6de75c3dd3974b44d860078e missed ifp. Reviewed-by: Sumit Bose --- src/sysv/systemd/sssd-ifp.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/sysv/systemd/sssd-ifp.service.in b/src/sysv/systemd/sssd-ifp.service.in index 551c6711cf..9095da3534 100644 --- a/src/sysv/systemd/sssd-ifp.service.in +++ b/src/sysv/systemd/sssd-ifp.service.in @@ -10,5 +10,5 @@ EnvironmentFile=-@environment_file@ Type=dbus BusName=org.freedesktop.sssd.infopipe ExecStart=@ifp_exec_cmd@ ${DEBUG_LOGGER} -CapabilityBoundingSet=CAP_IPC_LOCK CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETGID CAP_SETUID +CapabilityBoundingSet= @additional_caps@ CAP_IPC_LOCK CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETGID CAP_SETUID @ifp_restart@