Mirror
/
acmed
mirror of https://github.com/breard-r/acmed.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Browse Source

Change ProtectSystem to yes 

The strict mode was not adapted since it would prevent ACMEd to write
http-01 challenge files inside the web server's directory.
pull/53/head
Rodolphe Bréard 3 years ago
parent
5b42d1fe14
commit
8aae7d58b0
1 changed files with 1 additions and 1 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 2
      contrib/systemd/acmed.service

2
contrib/systemd/acmed.service
View File

@ -28,7 +28,7 @@ ProtectClock=yes
ProtectHostname=yes ProtectHostname=yes
ProtectKernelTunables=yes ProtectKernelTunables=yes
ProtectKernelLogs=yes ProtectKernelLogs=yes
ProtectSystem=strict
ProtectSystem=yes
ReadWritePaths=/etc/acmed /var/lib/acmed ReadWritePaths=/etc/acmed /var/lib/acmed
RestrictRealtime=yes RestrictRealtime=yes
RestrictSUIDSGID=yes RestrictSUIDSGID=yes

Write Preview
Loading…
Cancel
Save