about summary refs log tree commit diff
diff options
context:
space:
mode:
authorLerk <lukas@k40s.net>2021-12-22 03:34:12 +0000
committerGitHub <noreply@github.com>2021-12-22 04:34:12 +0100
commit56c55ab9f645c08e991dfa563cfbdb87d28a87d7 (patch)
tree3d4a020837ab38c53ea3f0f2010d71c1463621c8
parent512bc9db7da6ac53d3d62ef5afcf4d49cec9e780 (diff)
Add ReadWritePaths directive to service files (#17178)
* Update mastodon-web.service

* Update mastodon-streaming.service

* Update mastodon-sidekiq.service
-rw-r--r--dist/mastodon-sidekiq.service1
-rw-r--r--dist/mastodon-streaming.service1
-rw-r--r--dist/mastodon-web.service1
3 files changed, 3 insertions, 0 deletions
diff --git a/dist/mastodon-sidekiq.service b/dist/mastodon-sidekiq.service
index 7d2d72e99..324cd5a39 100644
--- a/dist/mastodon-sidekiq.service
+++ b/dist/mastodon-sidekiq.service
@@ -47,6 +47,7 @@ SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileg
 SystemCallFilter=@chown
 SystemCallFilter=pipe
 SystemCallFilter=pipe2
+ReadWritePaths=/home/mastodon/live
 
 [Install]
 WantedBy=multi-user.target
diff --git a/dist/mastodon-streaming.service b/dist/mastodon-streaming.service
index 6d71298a5..cf1f2d8bc 100644
--- a/dist/mastodon-streaming.service
+++ b/dist/mastodon-streaming.service
@@ -45,6 +45,7 @@ SystemCallArchitectures=native
 SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @memlock @mount @obsolete @privileged @resources @setuid
 SystemCallFilter=pipe
 SystemCallFilter=pipe2
+ReadWritePaths=/home/mastodon/live
 
 [Install]
 WantedBy=multi-user.target
diff --git a/dist/mastodon-web.service b/dist/mastodon-web.service
index 16d1d5653..a5598fdaa 100644
--- a/dist/mastodon-web.service
+++ b/dist/mastodon-web.service
@@ -47,6 +47,7 @@ SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileg
 SystemCallFilter=@chown
 SystemCallFilter=pipe
 SystemCallFilter=pipe2
+ReadWritePaths=/home/mastodon/live
 
 [Install]
 WantedBy=multi-user.target