package/v-m: Remove DynamicUser from systemd units
None of the Victoria Metrics services should run as a dynamic user. Indeed, enabling the setting appears to have no effect when `User` is defined and refers to a user that already exists. To reduce confusion, we should omit these directives from the unit files.
This commit is contained in:
@@ -19,7 +19,6 @@ LimitNOFILE=1048576
|
|||||||
CapabilityBoundingSet=
|
CapabilityBoundingSet=
|
||||||
DeviceAllow=
|
DeviceAllow=
|
||||||
DevicePolicy=closed
|
DevicePolicy=closed
|
||||||
DynamicUser=yes
|
|
||||||
IPAddressAllow=localhost
|
IPAddressAllow=localhost
|
||||||
IPAddressDeny=any
|
IPAddressDeny=any
|
||||||
LockPersonality=yes
|
LockPersonality=yes
|
||||||
|
|||||||
@@ -19,7 +19,6 @@ ReadWritePaths=/var/lib/victoria-metrics
|
|||||||
CapabilityBoundingSet=
|
CapabilityBoundingSet=
|
||||||
DeviceAllow=
|
DeviceAllow=
|
||||||
DevicePolicy=closed
|
DevicePolicy=closed
|
||||||
DynamicUser=yes
|
|
||||||
IPAddressAllow=localhost
|
IPAddressAllow=localhost
|
||||||
IPAddressDeny=any
|
IPAddressDeny=any
|
||||||
LockPersonality=yes
|
LockPersonality=yes
|
||||||
|
|||||||
@@ -18,7 +18,6 @@ LimitNOFILE=1048576
|
|||||||
CapabilityBoundingSet=
|
CapabilityBoundingSet=
|
||||||
DeviceAllow=
|
DeviceAllow=
|
||||||
DevicePolicy=closed
|
DevicePolicy=closed
|
||||||
DynamicUser=yes
|
|
||||||
IPAddressAllow=localhost
|
IPAddressAllow=localhost
|
||||||
IPAddressDeny=any
|
IPAddressDeny=any
|
||||||
LockPersonality=yes
|
LockPersonality=yes
|
||||||
|
|||||||
Reference in New Issue
Block a user