Bug#792653: Probably related to CapabilityBoundingSet

2017-10-09 Thread Bernhard Schmidt
Control: tags -1 wontfix Control: summary -1 CapabilityBoundingSet prevents "Unprivileged mode", needs override On Fri, May 13, 2016 at 09:01:20AM -0400, Simon Deziel wrote: Hi, > Hi Jim, > > On 2016-05-13 08:19 AM, BARBER, Jim wrote: > > I tried Simon Deziel's technique first. > > I ran:

Bug#792653: Probably related to CapabilityBoundingSet

2016-05-13 Thread Simon Deziel
Hi Jim, On 2016-05-13 08:19 AM, BARBER, Jim wrote: > I tried Simon Deziel's technique first. > I ran: systemctl edit openvpn@.service > It opened a blank editor and I added the following lines: > > [Service] > CapabilityBoundingSet= I'm sorry to have induce you in error.

Bug#792653: Probably related to CapabilityBoundingSet

2016-05-13 Thread BARBER, Jim
I tried Simon Deziel's technique first. I ran: systemctl edit openvpn@.service It opened a blank editor and I added the following lines: [Service] CapabilityBoundingSet= This created the /etc/systemd/system/openvpn@.service.d/override.conf file with the statements above. I then

Bug#792653: Probably related to CapabilityBoundingSet

2016-05-10 Thread Simon Deziel
Hi Alberto and Jim, On 2016-05-10 12:45 PM, Alberto Gonzalez Iniesta wrote: > So sorry took me this long to answer. I'm pretty sure this is related to > capabilities. Could try copying /lib/systemd/system/openvpn@.service to > /etc/systemd/system/openvpn@.service and removin the >

Bug#792653: Probably related to CapabilityBoundingSet

2016-05-10 Thread Alberto Gonzalez Iniesta
On Tue, May 10, 2016 at 12:53:17PM -0400, Simon Deziel wrote: > Hi Alberto and Jim, > > On 2016-05-10 12:45 PM, Alberto Gonzalez Iniesta wrote: > > So sorry took me this long to answer. I'm pretty sure this is related to > > capabilities. Could try copying /lib/systemd/system/openvpn@.service to

Bug#792653: Probably related to CapabilityBoundingSet

2016-05-10 Thread Alberto Gonzalez Iniesta
On Fri, Feb 19, 2016 at 11:56:10PM +, Jim Barber wrote: > > So perhaps another capability is stopping this file from being run? > I saw no other log messages relating to failure to access or run the > /usr/local/sbin/openvpn-ip script anywhere. Hi Jim, So sorry took me this long to answer.

Bug#792653: Probably related to CapabilityBoundingSet

2016-02-19 Thread Jim Barber
Alberto Gonzalez wrote: > Hi, Hi Alberto. I only just noticed now that you updated this case. > Did you run "systemctl daemon-reload" after changing the .service file? Yes, as per my original bug report I tried the following: Each time I edited the file, I tried the

Bug#792653: Probably related to CapabilityBoundingSet

2016-01-20 Thread Alberto Gonzalez Iniesta
Hi, Did you run "systemctl daemon-reload" after changing the .service file? I'll upload 2.3.10 soon, can you check if it works with it? Thanks, Alberto -- Alberto Gonzalez Iniesta| Formación, consultoría y soporte técnico mailto/sip: a...@inittab.org | en GNU/Linux y software libre