From 3299c9c0c75e77c477477b22d8a499590e26897e Mon Sep 17 00:00:00 2001 From: lasimik Date: Mon, 17 May 2021 01:28:52 +0000 Subject: [PATCH] Update 'Readme.md' --- Readme.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Readme.md b/Readme.md index 67a60a4..de5a4e2 100644 --- a/Readme.md +++ b/Readme.md @@ -18,7 +18,7 @@ The template from the borgmatic site (the`borgmatic.timer`) is fine, insert a st ### In the systemd service Again, the template from the borgmatic site (the `borgmatic.service`) is good, but needs an essential change: -The line `CapabilityBoundingSet=…` must give the additional capabilities `AP_SETUID `and `CAP_SETGID`. This will allow borgmatic (and whatever is called from it!!) to impersonate a different user (other than root). +The line `CapabilityBoundingSet=…` must grant the additional capabilities `AP_SETUID `and `CAP_SETGID`. This will allow borgmatic (and whatever is called from it!!) to impersonate a different user (other than root). *_This means a softening of security settings._ Make sure all permissions on borgmatic and scripts are set correctly!*