mirror of
https://github.com/borgmatic-collective/borgmatic.git
synced 2026-07-22 02:03:01 +02:00
Add the "CAP_FOWNER" capability to "CapabilityBoundingSet" in the sample systemd service, so that Borg can open source files without changing file access times (#1334).
This commit is contained in:
@@ -60,7 +60,7 @@ ProtectSystem=full
|
||||
# includes, for instance, programs to snapshot filesystems (e.g. ZFS, LVM, and
|
||||
# Btrfs). But rather than commenting this out entirely, one workaround may be to
|
||||
# add "CAP_SYS_ADMIN".
|
||||
CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_NET_RAW
|
||||
CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_FOWNER CAP_NET_RAW
|
||||
|
||||
# Lower CPU and I/O priority.
|
||||
Nice=19
|
||||
|
||||
Reference in New Issue
Block a user