Add ReadWritePaths directive to service files (#17178)

* Update mastodon-web.service

* Update mastodon-streaming.service

* Update mastodon-sidekiq.service

diff --git a/dist/mastodon-sidekiq.service b/dist/mastodon-sidekiq.service
index 7d2d72e998b1a43523ffa8dc7ea9f874f9077c8a..324cd5a3988f61f745a5e9f9436275690e10738d 100644 (file)
--- a/dist/mastodon-sidekiq.service
+++ b/dist/mastodon-sidekiq.service
@@ -47,6 +47,7 @@ SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileg
 SystemCallFilter=@chown
 SystemCallFilter=pipe
 SystemCallFilter=pipe2
+ReadWritePaths=/home/mastodon/live
 
 [Install]
 WantedBy=multi-user.target

diff --git a/dist/mastodon-streaming.service b/dist/mastodon-streaming.service
index 6d71298a56de0e05ee051535ad43d0e6c1bd8e0a..cf1f2d8bc69fd52209b33fb6402657386633741a 100644 (file)
--- a/dist/mastodon-streaming.service
+++ b/dist/mastodon-streaming.service
@@ -45,6 +45,7 @@ SystemCallArchitectures=native
 SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @memlock @mount @obsolete @privileged @resources @setuid
 SystemCallFilter=pipe
 SystemCallFilter=pipe2
+ReadWritePaths=/home/mastodon/live
 
 [Install]
 WantedBy=multi-user.target

diff --git a/dist/mastodon-web.service b/dist/mastodon-web.service
index 16d1d5653c0e986fb10b9c14d7a04c7e8f2a4270..a5598fdaa84c81985751062403fd6d8d0e187b8b 100644 (file)
--- a/dist/mastodon-web.service
+++ b/dist/mastodon-web.service
@@ -47,6 +47,7 @@ SystemCallFilter=~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileg
 SystemCallFilter=@chown
 SystemCallFilter=pipe
 SystemCallFilter=pipe2
+ReadWritePaths=/home/mastodon/live
 
 [Install]
 WantedBy=multi-user.target