summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks/bacula.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/common/tasks/bacula.yml')
-rw-r--r--roles/common/tasks/bacula.yml8
1 files changed, 8 insertions, 0 deletions
diff --git a/roles/common/tasks/bacula.yml b/roles/common/tasks/bacula.yml
index 73a2fa1..fb37b5b 100644
--- a/roles/common/tasks/bacula.yml
+++ b/roles/common/tasks/bacula.yml
@@ -63,6 +63,14 @@
- systemctl daemon-reload
- Restart bacula-fd
+# We use RuntimeDirectory in our service unit to avoid permission issues
+# caused by the restrictive Capability Bounding Set
+- name: Mask /usr/lib/tmpfiles.d/bacula.conf
+ file: src=/dev/null
+ dest=/etc/tmpfiles.d/bacula.conf
+ owner=root group=root
+ state=link
+
- meta: flush_handlers
- name: Enable bacula-fd