octoleo/syncthing
1
0
Fork 0
mirror of https://github.com/octoleo/syncthing.git synced 2024-12-22 10:58:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

etc/linux-systemd: Mention AmbientCapabilities for syncOwnership. (#8536)

Browse Source 
Add a commented entry to the systemd service file templates to point
the user in the right direction when using syncOwnership and starting
via systemd.  Which is more upgrade-friendly than setting caps on the
executable directly, as mentioned in the docs.
This commit is contained in:
André Colomb 2022-09-13 10:00:47 +02:00 committed by GitHub
parent 43f0e5c91d
commit 3e99ddfbf0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/linux-systemd/README.md
View File

@ -5,4 +5,4 @@ This directory contains configuration files for running Syncthing under the
systemd user service. For further documentation take a look at the [systemd systemd user service. For further documentation take a look at the [systemd
section][1] on https://docs.syncthing.net. section][1] on https://docs.syncthing.net.
[1]: https://docs.syncthing.net/users/autostart.html#using-systemd [1]: https://docs.syncthing.net/users/autostart#using-systemd

4
etc/linux-systemd/system/syncthing@.service
View File

@ -20,5 +20,9 @@ SystemCallArchitectures=native
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=true
NoNewPrivileges=true NoNewPrivileges=true
# Elevated permissions to sync ownership (disabled by default),
# see https://docs.syncthing.net/advanced/folder-sync-ownership
#AmbientCapabilities=CAP_CHOWN CAP_FOWNER
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

4
etc/linux-systemd/user/syncthing.service
View File

@ -16,5 +16,9 @@ SystemCallArchitectures=native
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=true
NoNewPrivileges=true NoNewPrivileges=true
# Elevated permissions to sync ownership (disabled by default),
# see https://docs.syncthing.net/advanced/folder-sync-ownership
#AmbientCapabilities=CAP_CHOWN CAP_FOWNER
[Install] [Install]
WantedBy=default.target WantedBy=default.target