From: Lennart Poettering <lennart@poettering.net>
Date: Fri, 18 Sep 2020 20:01:49 +0000 (+0200)
Subject: units: pass CAP_SYS_RESOURCE to homed
X-Git-Tag: v247-rc1~199^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c9ef77ec5ff5e7e283181e9dcfb93acfb0656ae6;p=thirdparty%2Fsystemd.git

units: pass CAP_SYS_RESOURCE to homed

The ext4 fs resize ioctl needs CAP_SYS_RESOURCE, irritatingly. Let's
grant it to homed hence.

Fixes: #15115
---

diff --git a/units/systemd-homed.service.in b/units/systemd-homed.service.in
index 45dc9306dda..7109e0351ce 100644
--- a/units/systemd-homed.service.in
+++ b/units/systemd-homed.service.in
@@ -14,7 +14,7 @@ After=home.mount
 
 [Service]
 BusName=org.freedesktop.home1
-CapabilityBoundingSet=CAP_SYS_ADMIN CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER CAP_FSETID CAP_SETGID CAP_SETUID
+CapabilityBoundingSet=CAP_SYS_ADMIN CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER CAP_FSETID CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE
 DeviceAllow=/dev/loop-control rw
 DeviceAllow=/dev/mapper/control rw
 DeviceAllow=block-* rw