RepoMirrors/ceph
1
0
Fork 0
mirror of https://github.com/ceph/ceph synced 2025-01-25 12:34:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge PR #40845 into master

Browse Source 
* refs/pull/40845/head:
	systemd: remove `ProtectClock=true` for `ceph-osd@.service`

Reviewed-by: Patrick Donnelly <pdonnell@redhat.com>
This commit is contained in:
Patrick Donnelly 2021-04-15 07:30:11 -07:00
commit 2293099bdf
No known key found for this signature in database
GPG Key ID: 3A2A7E25BEA8AADB
9 changed files with 1 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
systemd/ceph-fuse@.service.in
View File

@ -14,7 +14,6 @@ MemoryDenyWriteExecute=true
NoNewPrivileges=true
# ceph-fuse requires access to /dev fuse device
PrivateDevices=no
ProtectClock=true
ProtectControlGroups=true
ProtectHostname=true
ProtectKernelLogs=true

1
systemd/ceph-immutable-object-cache@.service.in
View File

@ -14,7 +14,6 @@ MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=yes
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true

1
systemd/ceph-mds@.service.in
View File

@ -17,7 +17,6 @@ MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=yes
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true

1
systemd/ceph-mgr@.service.in
View File

@ -16,7 +16,6 @@ LockPersonality=true
NoNewPrivileges=true
PrivateDevices=yes
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true

1
systemd/ceph-mon@.service.in
View File

@ -22,7 +22,6 @@ MemoryDenyWriteExecute=true
NoNewPrivileges=false
PrivateDevices=yes
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true

1
systemd/ceph-osd@.service.in
View File

@ -18,7 +18,6 @@ MemoryDenyWriteExecute=true
# Need NewPrivileges via `sudo smartctl`
NoNewPrivileges=false
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true

1
systemd/ceph-radosgw@.service.in
View File

@ -16,7 +16,6 @@ MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=yes
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true

1
systemd/ceph-rbd-mirror@.service.in
View File

@ -16,7 +16,6 @@ MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=yes
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true

3
systemd/cephfs-mirror@.service.in
View File

@ -15,7 +15,6 @@ MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=yes
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true
@ -30,4 +29,4 @@ StartLimitInterval=30min
TasksMax=infinity
[Install]
WantedBy=cephfs-mirror.target
WantedBy=cephfs-mirror.target