diff options
| -rw-r--r-- | support-files/mariadb.service.in | 3 | ||||
| -rw-r--r-- | support-files/mariadb@.service.in | 3 |
2 files changed, 4 insertions, 2 deletions
diff --git a/support-files/mariadb.service.in b/support-files/mariadb.service.in index 879c4d90a6c..6b8b2ba0ba3 100644 --- a/support-files/mariadb.service.in +++ b/support-files/mariadb.service.in @@ -48,7 +48,8 @@ CapabilityBoundingSet=CAP_IPC_LOCK # Prevent writes to /usr, /boot, and /etc ProtectSystem=full -NoNewPrivileges=true +# Doesn't yet work properly with SELinux enabled +# NoNewPrivileges=true PrivateDevices=true diff --git a/support-files/mariadb@.service.in b/support-files/mariadb@.service.in index b7ac3b808bf..965e85260e4 100644 --- a/support-files/mariadb@.service.in +++ b/support-files/mariadb@.service.in @@ -55,7 +55,8 @@ CapabilityBoundingSet=CAP_IPC_LOCK # Prevent writes to /usr, /boot, and /etc ProtectSystem=full -NoNewPrivileges=true +# Doesn't yet work properly with SELinux enabled +# NoNewPrivileges=true PrivateDevices=true |