From aee60b2d430b1ec5d73059a345fda8fa93fe3fa6 Mon Sep 17 00:00:00 2001 From: Rahil Bhimjiani Date: Thu, 22 Feb 2024 20:30:09 +0530 Subject: [PATCH] ReadWriteDirectories is deprecated in favor of ReadWritePaths https://github.com/systemd/systemd/blob/c0b5b74ae33141b04bc8aed6dd577dcf2858f90f/NEWS#L10620 --- Setup-as-a-systemd-service.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Setup-as-a-systemd-service.md b/Setup-as-a-systemd-service.md index f494c22..981aeee 100644 --- a/Setup-as-a-systemd-service.md +++ b/Setup-as-a-systemd-service.md @@ -45,12 +45,12 @@ ProtectHome=true ProtectSystem=strict # Only allow writes to the following directory and set it to the working directory (user and password data are stored here) WorkingDirectory=/var/lib/vaultwarden -ReadWriteDirectories=/var/lib/vaultwarden +ReadWritePaths=/var/lib/vaultwarden [Install] WantedBy=multi-user.target ``` -Change all paths to match your installation (`WorkingDirectory` and `ReadWriteDirectory` should be the same), +Change all paths to match your installation (`WorkingDirectory` and `ReadWritePaths` should be the same), name this file `vaultwarden.service` and put it into `/etc/systemd/system`. If you have to change an existing systemd file (which was provided to you by the package you installed), you can add your changes by using @@ -111,7 +111,7 @@ or Failed to parse protect system value ``` To work around this you can comment out some or all of these settings by putting a `#` in front of the lines containing -`PrivateTmp`, `PrivateDevices`, `ProtectHome`, `ProtectSystem` and `ReadWriteDirectories`. While commenting out all of them will probably work, it's not recommended as these are security measures which are good to have. To see which options your systemd supports, look at the output of +`PrivateTmp`, `PrivateDevices`, `ProtectHome`, `ProtectSystem` and `ReadWritePaths`. While commenting out all of them will probably work, it's not recommended as these are security measures which are good to have. To see which options your systemd supports, look at the output of ``` $ systemctl --version ```