From 7c17937d4bff1474343bb0dfe64f4eeb19983e42 Mon Sep 17 00:00:00 2001 From: Harsh Shandilya Date: Wed, 14 Feb 2018 23:41:12 +0530 Subject: [PATCH] Allow home access to c9 and jarvis-bot c9 _is_ run inside /home/msfjarvis and jarvis-bot dumps temp data in it's home in /home/bot/jarvis-ci-bot Signed-off-by: Harsh Shandilya --- c9.service | 2 -- jarvis-bot.service | 2 -- 2 files changed, 4 deletions(-) diff --git a/c9.service b/c9.service index 3341a35..7e38582 100644 --- a/c9.service +++ b/c9.service @@ -19,8 +19,6 @@ TimeoutStopSec=5s PrivateTmp=true ; Use a minimal /dev (May bring additional security if switched to 'true', but it may not work on Raspberry Pi's or other devices, so it has been disabled in this dist.) PrivateDevices=false -; Hide /home, /root, and /run/user. Nobody will steal your SSH-keys. -ProtectHome=true ; Make /usr, /boot, /etc and possibly some more folders read-only. ProtectSystem=full diff --git a/jarvis-bot.service b/jarvis-bot.service index e1d1e3a..e5a0dce 100644 --- a/jarvis-bot.service +++ b/jarvis-bot.service @@ -19,8 +19,6 @@ TimeoutStopSec=5s PrivateTmp=true ; Use a minimal /dev (May bring additional security if switched to 'true', but it may not work on Raspberry Pi's or other devices, so it has been disabled in this dist.) PrivateDevices=false -; Hide /home, /root, and /run/user. Nobody will steal your SSH-keys. -ProtectHome=true ; Make /usr, /boot, /etc and possibly some more folders read-only. ProtectSystem=full