e2scrub: make the e2scrub service files require CAP_SYS_ADMIN and CAP_SYS_RAWIO

Addresses-Debian-Bug: #926138

Signed-off-by: Theodore Ts'o <tytso@mit.edu>

diff --git a/scrub/e2scrub_all.service.in b/scrub/e2scrub_all.service.in
index bc05184b788f8c69a60596326decf526909b1fb6..20f42bfe3a4cbf2003341531a268f1334ca8d63d 100644 (file)
--- a/scrub/e2scrub_all.service.in
+++ b/scrub/e2scrub_all.service.in
@@ -1,6 +1,8 @@
 [Unit]
 Description=Online ext4 Metadata Check for All Filesystems
 ConditionACPower=true
+ConditionCapability=CAP_SYS_ADMIN
+ConditionCapability=CAP_SYS_RAWIO
 Documentation=man:e2scrub_all(8)
 
 [Service]

diff --git a/scrub/e2scrub_reap.service.in b/scrub/e2scrub_reap.service.in
index b0536151c901d3556854067b57c8128d7c93c005..cf26437cd49dda352481929cb9f45dc41a5352b9 100644 (file)
--- a/scrub/e2scrub_reap.service.in
+++ b/scrub/e2scrub_reap.service.in
@@ -1,5 +1,7 @@
 [Unit]
 Description=Remove Stale Online ext4 Metadata Check Snapshots
+ConditionCapability=CAP_SYS_ADMIN
+ConditionCapability=CAP_SYS_RAWIO
 Documentation=man:e2scrub_all(8)
 
 [Service]