Skip to content

M
MariaDB
Commit 1e160e5c authored by Sergey Vojtovich's avatar Sergey Vojtovich
Browse files
Options

MDEV-10404 - Improved systemd service hardening causes SELinux problems 

Disabled NoNewPrivileges until SELinux policy is fixed.
parent 48fbb2bf
Hide whitespace changes
Inline Side-by-side
Showing with 4 additions and 2 deletions
support-files/mariadb.service.in
View file @ 1e160e5c
...@@ -48,7 +48,8 @@ CapabilityBoundingSet=CAP_IPC_LOCK ...@@ -48,7 +48,8 @@ CapabilityBoundingSet=CAP_IPC_LOCK
# Prevent writes to /usr, /boot, and /etc # Prevent writes to /usr, /boot, and /etc
ProtectSystem=full ProtectSystem=full
NoNewPrivileges=true # Doesn't yet work properly with SELinux enabled
# NoNewPrivileges=true
PrivateDevices=true PrivateDevices=true
......
support-files/mariadb@.service.in
View file @ 1e160e5c
...@@ -55,7 +55,8 @@ CapabilityBoundingSet=CAP_IPC_LOCK ...@@ -55,7 +55,8 @@ CapabilityBoundingSet=CAP_IPC_LOCK
# Prevent writes to /usr, /boot, and /etc # Prevent writes to /usr, /boot, and /etc
ProtectSystem=full ProtectSystem=full
NoNewPrivileges=true # Doesn't yet work properly with SELinux enabled
# NoNewPrivileges=true
PrivateDevices=true PrivateDevices=true
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7