From bac7811d2b35252b7a83a45d75bb344b4b1776a9 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sat, 16 May 2020 02:52:55 +0200
Subject: Upgrade baseline to Debian 10.

---
 roles/common/tasks/bacula.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'roles/common/tasks/bacula.yml')

diff --git a/roles/common/tasks/bacula.yml b/roles/common/tasks/bacula.yml
index 73a2fa1..fb37b5b 100644
--- a/roles/common/tasks/bacula.yml
+++ b/roles/common/tasks/bacula.yml
@@ -63,6 +63,14 @@
     - systemctl daemon-reload
     - Restart bacula-fd
 
+# We use RuntimeDirectory in our service unit to avoid permission issues
+# caused by the restrictive Capability Bounding Set
+- name: Mask /usr/lib/tmpfiles.d/bacula.conf
+  file: src=/dev/null
+        dest=/etc/tmpfiles.d/bacula.conf
+        owner=root group=root
+        state=link
+
 - meta: flush_handlers
 
 - name: Enable bacula-fd
-- 
cgit v1.2.3