fix: set supported value for ProtectSystem= statement

bf26c31e · Jörg Sachse · 1651b2be · bf26c31e
Commit bf26c31e authored 1 year ago by Jörg Sachse
--- a/templates/usr/local/lib/systemd/system/rosetta_maintenance_begin.service.j2
+++ b/templates/usr/local/lib/systemd/system/rosetta_maintenance_begin.service.j2
@@ -13,7 +13,7 @@ Group={{ vault_rosetta_group }}
 ### Security features
 # documented at https://www.freedesktop.org/software/systemd/man/systemd.exec.html
 # or at `man (5) systemd.exec`
-ProtectSystem=strict
+ProtectSystem=full
 ProtectHome=read-only
 #ProtectHostname=true
 #ProtectClock=true