From 2ef1fe6b2afa9cd71f9bd540df4c70f77306de40 Mon Sep 17 00:00:00 2001 From: henrygd Date: Fri, 28 Feb 2025 14:28:00 -0500 Subject: [PATCH] systemd: remove ProtectKernelTunables=yes (#176) https://github.com/henrygd/beszel/issues/176#issuecomment-2691192334 --- supplemental/debian/beszel-agent.service | 1 - supplemental/scripts/install-agent.sh | 1 - 2 files changed, 2 deletions(-) diff --git a/supplemental/debian/beszel-agent.service b/supplemental/debian/beszel-agent.service index 78fbaaa..a57073e 100644 --- a/supplemental/debian/beszel-agent.service +++ b/supplemental/debian/beszel-agent.service @@ -21,7 +21,6 @@ ProtectClock=yes ProtectHome=read-only ProtectHostname=yes ProtectKernelLogs=yes -ProtectKernelTunables=yes ProtectSystem=strict RemoveIPC=yes RestrictSUIDSGID=true diff --git a/supplemental/scripts/install-agent.sh b/supplemental/scripts/install-agent.sh index ee44e01..92e7da7 100755 --- a/supplemental/scripts/install-agent.sh +++ b/supplemental/scripts/install-agent.sh @@ -483,7 +483,6 @@ ProtectClock=yes ProtectHome=read-only ProtectHostname=yes ProtectKernelLogs=yes -ProtectKernelTunables=yes ProtectSystem=strict RemoveIPC=yes RestrictSUIDSGID=true