X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=debian%2Fgigi-standalone.service;h=776625f823b15cc026dafbec93dbb5c028adcad3;hb=a57cede7c8b013b2578243c422f903b986ee8bd3;hp=e60e2eedf7620604f96797e51372d8c3f2f5ab33;hpb=db24c4e8c06c5562283539c0a4b4cce086d70600;p=gigi.git

diff --git a/debian/gigi-standalone.service b/debian/gigi-standalone.service
index e60e2eed..776625f8 100644
--- a/debian/gigi-standalone.service
+++ b/debian/gigi-standalone.service
@@ -6,7 +6,7 @@ Conflicts=gigi-proxy.service
 
 [Service]
 ExecStart=/usr/bin/java -cp /usr/share/java/postgresql-jdbc4.jar:/usr/share/java/gigi.jar org.cacert.gigi.Launcher /etc/cacert/gigi/conf.tar
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETUID
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETUID CAP_SETGID
 WorkingDirectory=/var/lib/cacert-gigi
 PrivateTmp=yes
 PrivateDevices=yes