usbguard
usbguard copied to clipboard
Added CAP_DAC_READ_SEARCH capability to systemd service file
With the old CapabilityBoundingSet the systemd service is not capable of loading (actually searching for) all permissions in the /etc/usbguard/rules.d folder. Adding CAP_DAC_READ_SEARCH allows the daemon running in a service to load rules from the rules folder.
See Issue #654