Browse Source

Merge pull request #2182 from edsgerlin/fix-systemd

Add `CAP_NET_BIND_SERVICE` to `shadowsocks-libev.service`
pull/2184/head
Max Lv 6 years ago
committed by GitHub
parent
commit
52e23688e8
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 6 additions and 0 deletions
  1. 1
      debian/shadowsocks-libev-local@.service
  2. 1
      debian/shadowsocks-libev-redir@.service
  3. 1
      debian/shadowsocks-libev-server@.service
  4. 1
      debian/shadowsocks-libev-tunnel@.service
  5. 2
      debian/shadowsocks-libev.service

1
debian/shadowsocks-libev-local@.service

@ -17,6 +17,7 @@ After=network.target
[Service]
Type=simple
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
ExecStart=/usr/bin/ss-local -c /etc/shadowsocks-libev/%i.json
[Install]

1
debian/shadowsocks-libev-redir@.service

@ -17,6 +17,7 @@ After=network.target
[Service]
Type=simple
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
ExecStart=/usr/bin/ss-redir -c /etc/shadowsocks-libev/%i.json
[Install]

1
debian/shadowsocks-libev-server@.service

@ -17,6 +17,7 @@ After=network.target
[Service]
Type=simple
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
ExecStart=/usr/bin/ss-server -c /etc/shadowsocks-libev/%i.json
[Install]

1
debian/shadowsocks-libev-tunnel@.service

@ -17,6 +17,7 @@ After=network.target
[Service]
Type=simple
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
ExecStart=/usr/bin/ss-tunnel -c /etc/shadowsocks-libev/%i.json
[Install]

2
debian/shadowsocks-libev.service

@ -15,6 +15,8 @@ After=network.target
[Service]
Type=simple
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
EnvironmentFile=/etc/default/shadowsocks-libev
User=nobody
Group=nogroup

Loading…
Cancel
Save