mbiryukova/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity

[systemd file] add note about commenting sandboxing section for

Browse source 
troubleshooting
This commit is contained in:
max furman 2021-03-01 15:48:07 -08:00
parent 0aa96a936f
commit ad48c8a881
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
systemd/step-ca.service
View file

@ -32,6 +32,8 @@ NoNewPrivileges=yes
; Sandboxing ; Sandboxing
; This sandboxing works with YubiKey PIV (via pcscd HTTP API), but it is likely ; This sandboxing works with YubiKey PIV (via pcscd HTTP API), but it is likely
; too restrictive for PKCS#11 HSMs. ; too restrictive for PKCS#11 HSMs.
;
; NOTE: Comment out the rest of this section for troubleshooting.
ProtectSystem=full ProtectSystem=full
ProtectHome=true ProtectHome=true
RestrictNamespaces=true RestrictNamespaces=true