mirror of
https://github.com/shadowsocks/shadowsocks-libev.git
synced 2026-10-25 18:23:42 +00:00
Add CAP_NET_BIND_SERVICE to shadowsocks-libev.service
It ensures process have permission to bind to port <=1000. Other systemd config files already have it except this one.
This commit is contained in:
Vendored
+1
@@ -15,6 +15,7 @@ After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
|
||||
EnvironmentFile=/etc/default/shadowsocks-libev
|
||||
User=nobody
|
||||
Group=nogroup
|
||||
|
||||
Reference in New Issue
Block a user