Remove Remove CapabilityBoundingSet: It breaks overlay

vaeth · Jul 16, 2017 · 9f44caa · 9f44caa
1 parent 47c51d7
commit 9f44caa
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/ChangeLog b/ChangeLog
@@ -1,5 +1,9 @@
 # ChangeLog for squashmount
 
+*squashmount-15.4.3_p2
+	Martin Väth <martin at mvath.de>:
+	- Remove CapabilityBoundingSet: It breaks overlay and possibly others
+
 *squashmount-15.4.3_p1
 	Martin Väth <martin at mvath.de>:
 	- Fix systemd unit paths in README

diff --git a/systemd/system/squashmount.service b/systemd/system/squashmount.service
@@ -7,7 +7,6 @@ After=local-fs.target systemd-tmpfiles-setup.service
 # long timeout in /etc/systemd/system/squashmount.service.d/timeout.conf
 TimeoutStopSec=1800
 Type=oneshot
-CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_SYS_ADMIN CAP_SYS_MODULE
 MemoryDenyWriteExecute=true
 NoNewPrivileges=true
 PrivateNetwork=true