From 87bed7aaf1617960a8137055d2f8d4301a0b72b3 Mon Sep 17 00:00:00 2001 From: GeorgianaElena Date: Thu, 19 Sep 2019 12:53:43 +0300 Subject: [PATCH] Disable ProtectHome=tmpfs --- tljh/systemd-units/jupyterhub.service | 2 -- tljh/systemd-units/traefik.service | 3 ++- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/tljh/systemd-units/jupyterhub.service b/tljh/systemd-units/jupyterhub.service index 477d04b..63527c4 100644 --- a/tljh/systemd-units/jupyterhub.service +++ b/tljh/systemd-units/jupyterhub.service @@ -8,8 +8,6 @@ After=traefik.service [Service] User=root Restart=always -# jupyterhub process should have no access to home directories -ProtectHome=tmpfs WorkingDirectory={install_prefix}/state # Protect bits that are normally shared across the system PrivateTmp=yes diff --git a/tljh/systemd-units/traefik.service b/tljh/systemd-units/traefik.service index 04f37ee..5884fa4 100644 --- a/tljh/systemd-units/traefik.service +++ b/tljh/systemd-units/traefik.service @@ -7,7 +7,8 @@ After=network.target [Service] User=root Restart=always -ProtectHome=tmpfs +# traefik process should have no access to home directories +ProtectHome=yes ProtectSystem=strict PrivateTmp=yes PrivateDevices=yes