Allow geoipupdate to access /var/lib/GeoIP

[chef.git] / cookbooks / geoipupdate / recipes / default.rb

diff --git a/cookbooks/geoipupdate/recipes/default.rb b/cookbooks/geoipupdate/recipes/default.rb
index 6d8e5b6e56018734803cd48e46460330c07952c7..2b2c23632c1bc97ce1ed2e10766f20b089374556 100644 (file)
--- a/cookbooks/geoipupdate/recipes/default.rb
+++ b/cookbooks/geoipupdate/recipes/default.rb
@@ -46,7 +46,7 @@ systemd_service "geoipupdate" do
   private_devices true
   protect_system "strict"
   protect_home true
-  read_write_paths "/usr/share/GeoIP"
+  read_write_paths %w[/usr/share/GeoIP /var/lib/GeoIP]
 end
 
 systemd_timer "geoipupdate" do