From 06014d726d53393b83692edb07e35db49c5988b9 Mon Sep 17 00:00:00 2001 From: Theodore Ts'o Date: Sun, 5 May 2019 22:26:04 -0400 Subject: [PATCH] e2scrub: make the e2scrub service files require CAP_SYS_ADMIN and CAP_SYS_RAWIO Addresses-Debian-Bug: #926138 Signed-off-by: Theodore Ts'o --- scrub/e2scrub_all.service.in | 2 ++ scrub/e2scrub_reap.service.in | 2 ++ 2 files changed, 4 insertions(+) diff --git a/scrub/e2scrub_all.service.in b/scrub/e2scrub_all.service.in index bc05184..20f42bf 100644 --- a/scrub/e2scrub_all.service.in +++ b/scrub/e2scrub_all.service.in @@ -1,6 +1,8 @@ [Unit] Description=Online ext4 Metadata Check for All Filesystems ConditionACPower=true +ConditionCapability=CAP_SYS_ADMIN +ConditionCapability=CAP_SYS_RAWIO Documentation=man:e2scrub_all(8) [Service] diff --git a/scrub/e2scrub_reap.service.in b/scrub/e2scrub_reap.service.in index b053615..cf26437 100644 --- a/scrub/e2scrub_reap.service.in +++ b/scrub/e2scrub_reap.service.in @@ -1,5 +1,7 @@ [Unit] Description=Remove Stale Online ext4 Metadata Check Snapshots +ConditionCapability=CAP_SYS_ADMIN +ConditionCapability=CAP_SYS_RAWIO Documentation=man:e2scrub_all(8) [Service] -- 1.8.3.1