From: Tom Hughes <tom@compton.nu>
Date: Sat, 23 Apr 2022 06:33:04 +0000 (+0100)
Subject: Adjust sandbox for otrs service
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/18131b23c3379c9bd43356bfa559f3ea7fc92685

Adjust sandbox for otrs service
---

diff --git a/cookbooks/otrs/recipes/default.rb b/cookbooks/otrs/recipes/default.rb
index 4cd24ada6..34adf2dd0 100644
--- a/cookbooks/otrs/recipes/default.rb
+++ b/cookbooks/otrs/recipes/default.rb
@@ -115,10 +115,9 @@ systemd_service "otrs" do
   group "otrs"
   exec_start "/opt/otrs/bin/otrs.Daemon.pl start"
   private_tmp true
-  private_devices true
   protect_system "full"
   protect_home true
-  no_new_privileges true
+  read_write_paths "/var/log/exim4"
 end
 
 service "otrs" do