From 550c78dfeb6e4773bcf7fd591f467ceb8cf52f18 Mon Sep 17 00:00:00 2001 From: Harsh Shandilya Date: Mon, 16 Dec 2019 21:39:08 +0530 Subject: [PATCH] systemd: Whitelist /etc/logs for caddy Signed-off-by: Harsh Shandilya --- systemd_units/caddy.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/systemd_units/caddy.service b/systemd_units/caddy.service index f151c99..c6fbfa1 100644 --- a/systemd_units/caddy.service +++ b/systemd_units/caddy.service @@ -20,7 +20,7 @@ PrivateTmp=true PrivateDevices=true ProtectHome=true ProtectSystem=full -ReadWriteDirectories=/etc/ssl/caddy +ReadWriteDirectories=/etc/ssl/caddy /etc/logs CapabilityBoundingSet=CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_BIND_SERVICE NoNewPrivileges=true