summarylogtreecommitdiffstats
path: root/hasplmd.service
diff options
context:
space:
mode:
authorIdo Rosen2016-08-11 23:44:12 -0400
committerIdo Rosen2016-08-11 23:47:30 -0400
commite92c7732a7f530a484c8bca879247dbe0faf35a4 (patch)
treea369c18485a04cc105e44e3e43254caf1d5d0110 /hasplmd.service
parent775538751259ddfea3bb3752f5c1bc57709792b5 (diff)
downloadaur-e92c7732a7f530a484c8bca879247dbe0faf35a4.tar.gz
I may have made it too secure...
aksusbd.service, winehasp.service, and hasplmd.service had PrivateTmp and PrivateNetwork enabled. Adding JoinsNamespaceOf=aksusbd.service to winehasp.service and hasplmd.service was sufficient to make them interoperate again (through the socket placed in /tmp/.aksusb), but the web admin panel at http://localhost:1947/ did not work due to PrivateNetwork. There seems to be no good solution that includes keeping PrivateTmp and PrivateNetwork, so I've disabled them for now for these three services.
Diffstat (limited to 'hasplmd.service')
-rw-r--r--hasplmd.service3
1 files changed, 1 insertions, 2 deletions
diff --git a/hasplmd.service b/hasplmd.service
index 009d88e2c4f2..7fa4f20637ef 100644
--- a/hasplmd.service
+++ b/hasplmd.service
@@ -4,14 +4,13 @@ After=aksusbd.service winehasp.service
Requires=aksusbd.service winehasp.service
BindsTo=aksusbd.service winehasp.service
PartOf=aksusbd.service winehasp.service
+JoinsNamespaceOf=aksusbd.service
[Service]
Type=forking
StandardOutput=tty
TimeoutStopSec=10s
-PrivateTmp=true
-PrivateNetwork=true
ProtectSystem=full
ProtectHome=true