diff options
| author | dormando <dormando@rydia.net> | 2016-12-18 17:38:17 -0800 |
|---|---|---|
| committer | dormando <dormando@rydia.net> | 2016-12-18 17:38:17 -0800 |
| commit | f0f3f3f1cee23b9e42fc7fac76266cc4a5b7fc31 (patch) | |
| tree | 1d668faea20bbeff98e2a8538a79168fbaaf0291 /scripts | |
| parent | 1c12cf1d34213c9a04192294412c6a5ec01a8287 (diff) | |
| download | memcached-f0f3f3f1cee23b9e42fc7fac76266cc4a5b7fc31.tar.gz | |
widen systemd caps to allow maxconns to increase
the parent process is the only one using that capability, once privileges are
dropped it's gone anyway. This prevents raising the connection limit from
breaking.
Diffstat (limited to 'scripts')
| -rw-r--r-- | scripts/memcached.service | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/scripts/memcached.service b/scripts/memcached.service index a96445b..854b7f3 100644 --- a/scripts/memcached.service +++ b/scripts/memcached.service @@ -34,7 +34,7 @@ NoNewPrivileges=true PrivateDevices=true # Required for dropping privileges and running as a different user -CapabilityBoundingSet=CAP_SETGID CAP_SETUID +CapabilityBoundingSet=CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE # Attempts to create memory mappings that are writable and executable at the same time, # or to change existing memory mappings to become executable are prohibited. |