From: Karel Zak <kzak@redhat.com>
Date: Mon, 22 Jul 2019 09:10:30 +0000 (+0200)
Subject: fstrim: fix systemd service protection
X-Git-Tag: v2.35-rc1~307
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c64d452b3eb85fe55e238144082247b05cc143ea;p=thirdparty%2Futil-linux.git

fstrim: fix systemd service protection

ProtectHome=yes makes /home inaccessible, but we need to open the
directories (mountpoints) read-only.

Addresses: https://github.com/karelzak/util-linux/issues/824
Signed-off-by: Karel Zak <kzak@redhat.com>
---

diff --git a/sys-utils/fstrim.service.in b/sys-utils/fstrim.service.in
index 516023ed83..2a8dc1d3a6 100644
--- a/sys-utils/fstrim.service.in
+++ b/sys-utils/fstrim.service.in
@@ -6,7 +6,7 @@ Documentation=man:fstrim(8)
 Type=oneshot
 ExecStart=@sbindir@/fstrim --fstab --verbose --quiet
 ProtectSystem=strict
-ProtectHome=yes
+ProtectHome=read-only
 PrivateDevices=no
 PrivateNetwork=yes
 PrivateUsers=no