Allow writes to CRM temporary files

diff --git a/cookbooks/civicrm/recipes/default.rb b/cookbooks/civicrm/recipes/default.rb
index 0182d32492460f72f07e999148d4abd9b07be0b9..5d0736e8b9e24f8cf64b5a86416029de1c49978d 100644 (file)
--- a/cookbooks/civicrm/recipes/default.rb
+++ b/cookbooks/civicrm/recipes/default.rb
@@ -180,6 +180,7 @@ systemd_service "osmf-crm-jobs" do
   sandbox :enable_network => true
   memory_deny_write_execute false
   restrict_address_families "AF_UNIX"
+  read_write_paths "/srv/join.osmfoundation.org/wp-content/uploads/civicrm"
 end
 
 systemd_timer "osmf-crm-jobs" do