github-personal/certificates
1
0
Fork 0
mirror of https://github.com/outbackdingo/certificates.git synced 2026-01-27 02:18:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

[systemd file] add note about commenting sandboxing section for

Browse Source 
troubleshooting
This commit is contained in:
max furman
2021-03-01 15:48:07 -08:00
parent 0aa96a936f
commit ad48c8a881
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
systemd/step-ca.service
View File

@@ -32,6 +32,8 @@ NoNewPrivileges=yes
; Sandboxing
; This sandboxing works with YubiKey PIV (via pcscd HTTP API), but it is likely
; too restrictive for PKCS#11 HSMs.
;
; NOTE: Comment out the rest of this section for troubleshooting.
ProtectSystem=full
ProtectHome=true
RestrictNamespaces=true