From 5b5a56cb5038006949128b68d2ccb0504402c4ed Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Mon, 11 Oct 2021 20:14:59 +0100 Subject: [PATCH] Relax sand boxing to allow planetdump to send mail --- cookbooks/planet/recipes/dump.rb | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/cookbooks/planet/recipes/dump.rb b/cookbooks/planet/recipes/dump.rb index 85243f335..83717fad4 100644 --- a/cookbooks/planet/recipes/dump.rb +++ b/cookbooks/planet/recipes/dump.rb @@ -116,11 +116,9 @@ systemd_service "planetdump@" do exec_start "/usr/local/bin/planetdump %i" memory_max "64G" private_tmp true - private_devices true - private_network true protect_system "full" protect_home true - no_new_privileges true + read_write_paths "/var/log/exim4" end cron_d "planet-dump-mirror" do -- 2.39.5