Add CAP_NET_BIND_SERVICE to shadowsocks-libev.service

It ensures process have permission to bind to port <=1000.
Other systemd config files already have it except this one.
This commit is contained in:
edsgerlin
2018-09-15 01:39:49 +09:00
parent ed7c1e64af
commit d5d28580f9
+1
View File
@@ -15,6 +15,7 @@ After=network.target
[Service]
Type=simple
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
EnvironmentFile=/etc/default/shadowsocks-libev
User=nobody
Group=nogroup