Merge pull request #328 from liutgnu/master

Add CAP_SETPCAP to CapabilityBoundingSet in irqbalance.service
Irqbalance · Aug 20, 2024 · c519d1d · c519d1d
2 parents a350549 + 196385b
commit c519d1d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/misc/irqbalance.service b/misc/irqbalance.service
@@ -9,7 +9,7 @@ ConditionCPUs=>1
 EnvironmentFile=-/usr/lib/irqbalance/defaults.env
 EnvironmentFile=-/path/to/irqbalance.env
 ExecStart=/usr/sbin/irqbalance $IRQBALANCE_ARGS
-CapabilityBoundingSet=
+CapabilityBoundingSet=CAP_SETPCAP
 NoNewPrivileges=yes
 ProtectSystem=strict
 ReadOnlyPaths=/