From c0f0fa8ac348473b80d6444910f253a7b1196c9b Mon Sep 17 00:00:00 2001 From: Alexander Batischev Date: Sat, 5 Aug 2023 11:34:49 +0300 Subject: [PATCH] systemd: comment out ExecPaths for now --- ansible/minoru-fediverse-crawler.service | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/ansible/minoru-fediverse-crawler.service b/ansible/minoru-fediverse-crawler.service index 3f2ff1a..20f0ffd 100644 --- a/ansible/minoru-fediverse-crawler.service +++ b/ansible/minoru-fediverse-crawler.service @@ -32,8 +32,9 @@ SystemCallErrorNumber=EPERM ProtectSystem=strict ProtectHome=yes ReadWritePaths=/var/lib/fedicrawler -NoExecPaths=/ -ExecPaths=/var/lib/fedicrawler +# TODO: figure out why those make the crawler non-executable https://github.com/Minoru/minoru-fediverse-crawler/issues/214 +#NoExecPaths=/ +#ExecPaths=/var/lib/fedicrawler PrivateDevices=yes ProtectKernelTunables=yes