From b41f4cfa0daba8050733dcdd7fff37e4cc357154 Mon Sep 17 00:00:00 2001 From: Dan Helfman Date: Mon, 13 Jul 2026 16:08:52 -0700 Subject: [PATCH] Add the "CAP_FOWNER" capability to "CapabilityBoundingSet" in the sample systemd service, so that Borg can open source files without changing file access times (#1334). --- NEWS | 2 ++ sample/systemd/borgmatic.service | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 1d9f667c..cf602361 100644 --- a/NEWS +++ b/NEWS @@ -12,6 +12,8 @@ disabling dumping of scheduled events, stored routines, and tablespaces, respectively. * #1333: Fix the "--progress" flag on the "compact" action to actually update the progress of segment compaction. + * #1334: Add the "CAP_FOWNER" capability to "CapabilityBoundingSet" in the sample systemd service, + so that Borg can open source files without changing file access times. * Fix a bug in which the "compact" action does not pass a compact threshold of zero to Borg. 2.1.6 diff --git a/sample/systemd/borgmatic.service b/sample/systemd/borgmatic.service index e5a6ecc0..856de912 100644 --- a/sample/systemd/borgmatic.service +++ b/sample/systemd/borgmatic.service @@ -60,7 +60,7 @@ ProtectSystem=full # includes, for instance, programs to snapshot filesystems (e.g. ZFS, LVM, and # Btrfs). But rather than commenting this out entirely, one workaround may be to # add "CAP_SYS_ADMIN". -CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_NET_RAW +CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_FOWNER CAP_NET_RAW # Lower CPU and I/O priority. Nice=19