fstrim: fix systemd service protection

ProtectHome=yes makes /home inaccessible, but we need to open the
directories (mountpoints) read-only.

Addresses: https://github.com/karelzak/util-linux/issues/824
Signed-off-by: Karel Zak <kzak@redhat.com>

diff --git a/sys-utils/fstrim.service.in b/sys-utils/fstrim.service.in
index 516023ed836448f77de845f6720afe9b59f7e188..2a8dc1d3a6b03f92eeb1b8d8b26926d635339605 100644 (file)
--- a/sys-utils/fstrim.service.in
+++ b/sys-utils/fstrim.service.in
@@ -6,7 +6,7 @@ Documentation=man:fstrim(8)
 Type=oneshot
 ExecStart=@sbindir@/fstrim --fstab --verbose --quiet
 ProtectSystem=strict
-ProtectHome=yes
+ProtectHome=read-only
 PrivateDevices=no
 PrivateNetwork=yes
 PrivateUsers=no