diff options
| author | Sergey Vojtovich <svoj@mariadb.org> | 2015-12-22 14:51:26 +0400 |
|---|---|---|
| committer | Sergey Vojtovich <svoj@mariadb.org> | 2015-12-22 19:13:51 +0400 |
| commit | 27e6fd9a596847a1a4c618d16ed43f6885dfe73a (patch) | |
| tree | c703a41a22769264e873d5e9664bc7c1884c395f /support-files | |
| parent | 87e6873ce91831c247331a8964c3267952efe95a (diff) | |
| download | mariadb-git-27e6fd9a596847a1a4c618d16ed43f6885dfe73a.tar.gz | |
MDEV-9095 - [PATCH] systemd capability for --memlock
Adjust systemd files to enable CAP_IPC_LOCK to allow rootless mlockall
(triggered by memlock option).
This is amended version of a patch originally submitted by Daniel Black.
Diffstat (limited to 'support-files')
| -rw-r--r-- | support-files/mariadb.service.in | 3 | ||||
| -rw-r--r-- | support-files/mariadb@.service.in | 3 |
2 files changed, 6 insertions, 0 deletions
diff --git a/support-files/mariadb.service.in b/support-files/mariadb.service.in index bf1e3be7407..b18674bea46 100644 --- a/support-files/mariadb.service.in +++ b/support-files/mariadb.service.in @@ -42,6 +42,9 @@ PrivateNetwork=false User=mysql Group=mysql +# To allow memlock to be used as non-root user if set in configuration +CapabilityBoundingSet=CAP_IPC_LOCK + # Execute pre and post scripts as root, otherwise it does it as User= PermissionsStartOnly=true diff --git a/support-files/mariadb@.service.in b/support-files/mariadb@.service.in index aca95cdb543..fb3b4b5f41d 100644 --- a/support-files/mariadb@.service.in +++ b/support-files/mariadb@.service.in @@ -49,6 +49,9 @@ PrivateNetwork=false User=mysql Group=mysql +# To allow memlock to be used as non-root user if set in configuration +CapabilityBoundingSet=CAP_IPC_LOCK + # Execute pre and post scripts as root, otherwise it does it as User= PermissionsStartOnly=true |