dde63ae419
This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/sssd.git#04d2a458e321f58aade008d44706bfdb38a22e80
24 lines
1023 B
Diff
24 lines
1023 B
Diff
From 2a512fdf57055a2ce4ae02256dfabb5b74d2abd6 Mon Sep 17 00:00:00 2001
|
|
From: Alexey Tikhonov <atikhono@redhat.com>
|
|
Date: Mon, 22 Mar 2021 15:18:57 +0100
|
|
Subject: [PATCH] systemd configs: add CAP_DAC_OVERRIDE for ifp in certain case
|
|
|
|
Commit fd7ce7b3de9647eb6de75c3dd3974b44d860078e missed ifp.
|
|
|
|
Reviewed-by: Sumit Bose <sbose@redhat.com>
|
|
---
|
|
src/sysv/systemd/sssd-ifp.service.in | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/src/sysv/systemd/sssd-ifp.service.in b/src/sysv/systemd/sssd-ifp.service.in
|
|
index 551c6711cf..9095da3534 100644
|
|
--- a/src/sysv/systemd/sssd-ifp.service.in
|
|
+++ b/src/sysv/systemd/sssd-ifp.service.in
|
|
@@ -10,5 +10,5 @@ EnvironmentFile=-@environment_file@
|
|
Type=dbus
|
|
BusName=org.freedesktop.sssd.infopipe
|
|
ExecStart=@ifp_exec_cmd@ ${DEBUG_LOGGER}
|
|
-CapabilityBoundingSet=CAP_IPC_LOCK CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETGID CAP_SETUID
|
|
+CapabilityBoundingSet= @additional_caps@ CAP_IPC_LOCK CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETGID CAP_SETUID
|
|
@ifp_restart@
|