Fix up the CapabilityBoundingSet to allow changing the GID and UID as part of a polkit or sudo restart, also ensure dbus is running as on some minimised systems it might not be (hi dietpi!)

This commit is contained in:
Joshua Mesilane
2026-05-01 19:49:15 +10:00
parent 8bbef50e37
commit f1933dd2b0
+4 -3
View File
@@ -3,8 +3,9 @@
[Unit]
Description=pyMC Repeater Daemon
After=network-online.target
After=network-online.target dbus.socket
Wants=network-online.target
Requires=dbus.socket
[Service]
Type=simple
@@ -34,8 +35,8 @@ SyslogIdentifier=pymc-repeater
ReadWritePaths=/var/log/pymc_repeater /var/lib/pymc_repeater /etc/pymc_repeater
SupplementaryGroups=plugdev dialout
# Allow GPS time sync to update CLOCK_REALTIME without running as root
CapabilityBoundingSet=CAP_SYS_TIME
# Allow GPS time sync to update CLOCK_REALTIME without running as root, also allow changing user via polkit or sudo
CapabilityBoundingSet=CAP_SYS_TIME CAP_SETUID CAP_SETGID
AmbientCapabilities=CAP_SYS_TIME
[Install]