package/v-m: Remove DynamicUser from systemd units
None of the Victoria Metrics services should run as a dynamic user. Indeed, enabling the setting appears to have no effect when `User` is defined and refers to a user that already exists. To reduce confusion, we should omit these directives from the unit files.pull/2/head
parent
e009a4e167
commit
c1a6f3bb8e
|
@ -19,7 +19,6 @@ LimitNOFILE=1048576
|
||||||
CapabilityBoundingSet=
|
CapabilityBoundingSet=
|
||||||
DeviceAllow=
|
DeviceAllow=
|
||||||
DevicePolicy=closed
|
DevicePolicy=closed
|
||||||
DynamicUser=yes
|
|
||||||
IPAddressAllow=localhost
|
IPAddressAllow=localhost
|
||||||
IPAddressDeny=any
|
IPAddressDeny=any
|
||||||
LockPersonality=yes
|
LockPersonality=yes
|
||||||
|
|
|
@ -19,7 +19,6 @@ ReadWritePaths=/var/lib/victoria-metrics
|
||||||
CapabilityBoundingSet=
|
CapabilityBoundingSet=
|
||||||
DeviceAllow=
|
DeviceAllow=
|
||||||
DevicePolicy=closed
|
DevicePolicy=closed
|
||||||
DynamicUser=yes
|
|
||||||
IPAddressAllow=localhost
|
IPAddressAllow=localhost
|
||||||
IPAddressDeny=any
|
IPAddressDeny=any
|
||||||
LockPersonality=yes
|
LockPersonality=yes
|
||||||
|
|
|
@ -18,7 +18,6 @@ LimitNOFILE=1048576
|
||||||
CapabilityBoundingSet=
|
CapabilityBoundingSet=
|
||||||
DeviceAllow=
|
DeviceAllow=
|
||||||
DevicePolicy=closed
|
DevicePolicy=closed
|
||||||
DynamicUser=yes
|
|
||||||
IPAddressAllow=localhost
|
IPAddressAllow=localhost
|
||||||
IPAddressDeny=any
|
IPAddressDeny=any
|
||||||
LockPersonality=yes
|
LockPersonality=yes
|
||||||
|
|
Loading…
Reference in New Issue