From 27aca7474c868ca0e1abb0d71708c6a325df9817 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Sat, 10 Jun 2023 20:42:37 -0400 Subject: [PATCH] drop no-op RemoveIPC --- systemd/system/certbot-renew.service.d/local.conf | 1 - systemd/system/nginx.service.d/local.conf | 1 - 2 files changed, 2 deletions(-) diff --git a/systemd/system/certbot-renew.service.d/local.conf b/systemd/system/certbot-renew.service.d/local.conf index 6d1e93b..d5f03ca 100644 --- a/systemd/system/certbot-renew.service.d/local.conf +++ b/systemd/system/certbot-renew.service.d/local.conf @@ -19,7 +19,6 @@ ProtectKernelTunables=true ProtectProc=invisible ProtectSystem=strict ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/certbot -/etc/nginx/ocsp-cache -RemoveIPC=true RestrictAddressFamilies=AF_INET AF_INET6 RestrictNamespaces=true RestrictRealtime=true diff --git a/systemd/system/nginx.service.d/local.conf b/systemd/system/nginx.service.d/local.conf index cb95935..56e7e50 100644 --- a/systemd/system/nginx.service.d/local.conf +++ b/systemd/system/nginx.service.d/local.conf @@ -18,7 +18,6 @@ ProtectKernelTunables=true ProtectProc=invisible ProtectSystem=strict ReadWritePaths=/var/lib/nginx /var/log/nginx -/var/cache/nginx -RemoveIPC=true Restart=always RestartSec=1 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX