Am 31.10.2014 um 18:06 schrieb Fisher, Charles J. (Top Echelon):
From: systemd-devel [mailto:systemd-devel-boun...@lists.freedesktop.org] On 
Behalf Of Reindl Harald

For some reason, the iptables didn't happen. Maybe it needs to be fully 
qualified.

yes it needs to be as any other path
the documentation is very clear here

No, [unix] user oracle doesn't have permission to run iptables.

but it needs to be full qualified anyways

I either need to sudo something up, or put this elsewhere.
Letting different commands run with different uids/gids would be a nice feature

"PermissionsStartOnly=true" exists and so you can have helper processes as root while restrict the main process - anything else is hardly maintainable with the now clear ini-style of a unit

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to