nixos/ldap: add CAP_SYS_RESOURCE capability to nslcd service

2020-01-31 10:12:41 -05:00 · 2020-01-31 10:12:41 -05:00 · 28bedc5f11
commit 28bedc5f11
parent 90c96ec31d
1 changed files with 1 additions and 0 deletions
--- a/nixos/modules/config/ldap.nix
+++ b/nixos/modules/config/ldap.nix
@ -280,6 +280,7 @@ in
          Group = "nslcd";
          RuntimeDirectory = [ "nslcd" ];
          PIDFile = "/run/nslcd/nslcd.pid";
+          AmbientCapabilities = "CAP_SYS_RESOURCE";
        };
      };