Changes between Version 12 and Version 13 of UnprivilegedUser

Timestamp:

01/29/20 14:25:45 (4 years ago)

Author:

grzeg0rz

Comment:

--

UnprivilegedUser

@@ -291 +291 @@
 Group=target_unprivileged_group
 ExecStart=/usr/bin/podman run --rm -v /home/target_unprivileged_user/ovpn_config_files/:/ovpn_config_files -p 56787:56787 --device /dev/net/tun --device /dev/null --cap-add CAP_IPC_LOCK,CAP_NET_ADMIN,CAP_NET_BIND_SERVICE,CAP_NET_RAW,CAP_SETGID,CAP_SETUID,CAP_SYS_CHROOT,CAP_DAC_OVERRIDE,CAP_AUDIT_WRITE localhost/openvpn:latest /usr/bin/openvpn --config /ovpn_config_files/openvpn_server.conf
-ExecStop=/usr/bin/podman stop -t 1 localhost/openvpn:latest
+ExecStop=/usr/bin/podman stop -t 0 localhost/openvpn:latest
 Capabilities=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
-DeviceAllow=/dev/null rw
-DeviceAllow=/dev/net/tun rw
 RestartSec=5s
 Restart=on-failure