From: Theodore Ts'o <tytso@mit.edu>
Date: Mon, 6 May 2019 02:26:04 +0000 (-0400)
Subject: e2scrub: make the e2scrub service files require CAP_SYS_ADMIN and CAP_SYS_RAWIO
X-Git-Tag: v1.45.1-rc1~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=06014d726d53393b83692edb07e35db49c5988b9;p=thirdparty%2Fe2fsprogs.git

e2scrub: make the e2scrub service files require CAP_SYS_ADMIN and CAP_SYS_RAWIO

Addresses-Debian-Bug: #926138

Signed-off-by: Theodore Ts'o <tytso@mit.edu>
---

diff --git a/scrub/e2scrub_all.service.in b/scrub/e2scrub_all.service.in
index bc05184b7..20f42bfe3 100644
--- a/scrub/e2scrub_all.service.in
+++ b/scrub/e2scrub_all.service.in
@@ -1,6 +1,8 @@
 [Unit]
 Description=Online ext4 Metadata Check for All Filesystems
 ConditionACPower=true
+ConditionCapability=CAP_SYS_ADMIN
+ConditionCapability=CAP_SYS_RAWIO
 Documentation=man:e2scrub_all(8)
 
 [Service]
diff --git a/scrub/e2scrub_reap.service.in b/scrub/e2scrub_reap.service.in
index b0536151c..cf26437cd 100644
--- a/scrub/e2scrub_reap.service.in
+++ b/scrub/e2scrub_reap.service.in
@@ -1,5 +1,7 @@
 [Unit]
 Description=Remove Stale Online ext4 Metadata Check Snapshots
+ConditionCapability=CAP_SYS_ADMIN
+ConditionCapability=CAP_SYS_RAWIO
 Documentation=man:e2scrub_all(8)
 
 [Service]