@ -20,7 +20,7 @@ Again, the template from the borgmatic site (the `borgmatic.service`) is good, b
The line `CapabilityBoundingSet=…` must grant the additional capabilities `AP_SETUID `and `CAP_SETGID`. This will allow borgmatic (and whatever is called from it!!) to impersonate a different user (other than root).
*_This means a softening of security settings._ Make sure all permissions on borgmatic and scripts are set correctly!*
*__This means a softening of security settings.__ Make sure all permissions on borgmatic and scripts are set correctly!*