SYSTEMD: CAP_CHOWN isn't needed anymore

alexey-tikhonov · Jan 30, 2024 · 0d74539 · 0d74539
1 parent 733ffd7
commit 0d74539
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/sysv/systemd/sssd.service.in b/src/sysv/systemd/sssd.service.in
@@ -17,7 +17,7 @@ PIDFile=@pidpath@/sssd.pid
 # Currently main SSSD process ('sssd') always runs under 'root'
 # ('User=' and 'Group=' defaults to 'root' for system services)
 # 'CapabilityBoundingSet' is used to limit privileges set:
-CapabilityBoundingSet= @additional_caps@ CAP_CHOWN CAP_KILL CAP_SETGID CAP_SETUID
+CapabilityBoundingSet= @additional_caps@ CAP_KILL CAP_SETGID CAP_SETUID
 Restart=on-abnormal
 @supplementary_groups@