From bb0716421de9a448aa8658f66779730876022367 Mon Sep 17 00:00:00 2001 From: Dan Helfman Date: Tue, 25 Jan 2022 09:26:11 -0800 Subject: [PATCH] Add comment about systemd service setting that may interfere with external commands in hooks (#492). --- sample/systemd/borgmatic.service | 1 + 1 file changed, 1 insertion(+) diff --git a/sample/systemd/borgmatic.service b/sample/systemd/borgmatic.service index d025785b9..10e22caa8 100644 --- a/sample/systemd/borgmatic.service +++ b/sample/systemd/borgmatic.service @@ -43,6 +43,7 @@ ProtectSystem=full # ProtectHome=tmpfs # BindPaths=-/root/.cache/borg -/root/.cache/borg -/root/.borgmatic +# May interfere with running external programs within borgmatic hooks. CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_NET_RAW # Lower CPU and I/O priority.