nixos/sssd: remove unnecessary capabilities (#479292)

2026-03-04 01:11:06 +00:00
parent 9bdfd7a715 bcadb5d44f
commit 4b8ae5e0c1
1 changed files with 0 additions and 9 deletions
@@ -158,18 +158,9 @@ in
          NotifyAccess = "main";
          PIDFile = "/run/sssd.pid";
          CapabilityBoundingSet = [
-            "CAP_IPC_LOCK"
-            "CAP_CHOWN"
            "CAP_DAC_READ_SEARCH"
-            "CAP_KILL"
-            "CAP_NET_ADMIN"
-            "CAP_SYS_NICE"
-            "CAP_FOWNER"
            "CAP_SETGID"
            "CAP_SETUID"
-            "CAP_SYS_ADMIN"
-            "CAP_SYS_RESOURCE"
-            "CAP_BLOCK_SUSPEND"
          ];
          Restart = "on-abnormal";
          StateDirectory = baseNameOf dataDir;