X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/0ff9f261a10a51cc80225af7f0e873b6b8573f01..00bc7e2e46dba86663711b6b020d509ca64ed089:/cookbooks/planet/recipes/replication.rb diff --git a/cookbooks/planet/recipes/replication.rb b/cookbooks/planet/recipes/replication.rb index 85d49bc09..fa9649a38 100644 --- a/cookbooks/planet/recipes/replication.rb +++ b/cookbooks/planet/recipes/replication.rb @@ -312,6 +312,7 @@ systemd_service "replication-hourly" do exec_start "/usr/local/bin/osmosis -q --merge-replication-files workingDirectory=/var/lib/replication/hour" environment "LD_PRELOAD" => "/opt/flush/flush.so" sandbox :enable_network => true + memory_deny_write_execute false read_write_paths [ "/store/planet/replication/hour", "/var/lib/replication/hour" @@ -355,6 +356,7 @@ systemd_service "replication-daily" do exec_start "/usr/local/bin/osmosis -q --merge-replication-files workingDirectory=/var/lib/replication/day" environment "LD_PRELOAD" => "/opt/flush/flush.so" sandbox :enable_network => true + memory_deny_write_execute false read_write_paths [ "/store/planet/replication/day", "/var/lib/replication/day"