etc/linux-systemd: Mention AmbientCapabilities for syncOwnership. (#8536)

Add a commented entry to the systemd service file templates to point
the user in the right direction when using syncOwnership and starting
via systemd.  Which is more upgrade-friendly than setting caps on the
executable directly, as mentioned in the docs.
This commit is contained in:
André Colomb
2022-09-13 10:00:47 +02:00
committed by GitHub
parent 43f0e5c91d
commit 3e99ddfbf0
3 changed files with 9 additions and 1 deletions
@@ -20,5 +20,9 @@ SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true
# Elevated permissions to sync ownership (disabled by default),
# see https://docs.syncthing.net/advanced/folder-sync-ownership
#AmbientCapabilities=CAP_CHOWN CAP_FOWNER
[Install]
WantedBy=multi-user.target