apitech
/
grafana
mirror of https://github.com/grafana/grafana
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

remove systemcallfilters sections from systemd unit files (#40176)

Browse Source
pull/40222/head
Kevin Minehart 4 years ago committed by GitHub
parent d9c0220824
commit cdea812cee
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 8 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 5
      packaging/deb/systemd/grafana-server.service
  2. 5
      packaging/rpm/systemd/grafana-server.service

5
packaging/deb/systemd/grafana-server.service
Unescape View File

@ -29,7 +29,7 @@ TimeoutStopSec=20
CapabilityBoundingSet= CapabilityBoundingSet=
DeviceAllow= DeviceAllow=
LockPersonality=true LockPersonality=true
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=false
NoNewPrivileges=true NoNewPrivileges=true
PrivateDevices=true PrivateDevices=true
PrivateTmp=true PrivateTmp=true
@ -50,9 +50,6 @@ RestrictNamespaces=true
RestrictRealtime=true RestrictRealtime=true
RestrictSUIDSGID=true RestrictSUIDSGID=true
SystemCallArchitectures=native SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged
SystemCallFilter=~@resources
UMask=0027 UMask=0027
[Install] [Install]

5
packaging/rpm/systemd/grafana-server.service
Unescape View File

@ -28,7 +28,7 @@ TimeoutStopSec=20
CapabilityBoundingSet= CapabilityBoundingSet=
DeviceAllow= DeviceAllow=
LockPersonality=true LockPersonality=true
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=false
NoNewPrivileges=true NoNewPrivileges=true
PrivateDevices=true PrivateDevices=true
PrivateTmp=true PrivateTmp=true
@ -49,9 +49,6 @@ RestrictNamespaces=true
RestrictRealtime=true RestrictRealtime=true
RestrictSUIDSGID=true RestrictSUIDSGID=true
SystemCallArchitectures=native SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged
SystemCallFilter=~@resources
UMask=0027 UMask=0027
[Install] [Install]

Write Preview
Loading…
Cancel
Save