public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

remove systemcallfilters sections from systemd unit files (#40176) (#40219)

Browse Source 
(cherry picked from commit cdea812cee)

Co-authored-by: Kevin Minehart <kmineh0151@gmail.com>
This commit is contained in:
Grot (@grafanabot)
2021-10-08 16:17:59 +02:00
committed by GitHub
co-authored by Kevin Minehart
parent 3ff6fcdb50
commit 80d7138076
2 changed files with 2 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packaging/deb/systemd/grafana-server.service
+1 -4
View File
@@ -29,7 +29,7 @@ TimeoutStopSec=20
CapabilityBoundingSet=
DeviceAllow=
LockPersonality=true
MemoryDenyWriteExecute=true
MemoryDenyWriteExecute=false
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
@@ -50,9 +50,6 @@ RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged
SystemCallFilter=~@resources
UMask=0027
[Install]
packaging/rpm/systemd/grafana-server.service
+1 -4
View File
@@ -28,7 +28,7 @@ TimeoutStopSec=20
CapabilityBoundingSet=
DeviceAllow=
LockPersonality=true
MemoryDenyWriteExecute=true
MemoryDenyWriteExecute=false
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
@@ -49,9 +49,6 @@ RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged
SystemCallFilter=~@resources
UMask=0027
[Install]