From f1933dd2b074d5b2b76d835ba6d3109abb3ba6a2 Mon Sep 17 00:00:00 2001 From: Joshua Mesilane Date: Fri, 1 May 2026 19:49:15 +1000 Subject: [PATCH] Fix up the CapabilityBoundingSet to allow changing the GID and UID as part of a polkit or sudo restart, also ensure dbus is running as on some minimised systems it might not be (hi dietpi!) --- pymc-repeater.service | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/pymc-repeater.service b/pymc-repeater.service index 0104df8..cc7715d 100644 --- a/pymc-repeater.service +++ b/pymc-repeater.service @@ -3,8 +3,9 @@ [Unit] Description=pyMC Repeater Daemon -After=network-online.target +After=network-online.target dbus.socket Wants=network-online.target +Requires=dbus.socket [Service] Type=simple @@ -34,8 +35,8 @@ SyslogIdentifier=pymc-repeater ReadWritePaths=/var/log/pymc_repeater /var/lib/pymc_repeater /etc/pymc_repeater SupplementaryGroups=plugdev dialout -# Allow GPS time sync to update CLOCK_REALTIME without running as root -CapabilityBoundingSet=CAP_SYS_TIME +# Allow GPS time sync to update CLOCK_REALTIME without running as root, also allow changing user via polkit or sudo +CapabilityBoundingSet=CAP_SYS_TIME CAP_SETUID CAP_SETGID AmbientCapabilities=CAP_SYS_TIME [Install]