mirror of
https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git
synced 2026-03-05 18:10:36 +01:00
ebe83f27bb
Since 5.8, kernel requires CAP_BPF for processes that want to use eBPF. CAP_BPF together with CAP_NET_ADMIN allows to load networking eBPF programs (e.g. attach a filter to a socket). Add the capability to the service unit when we are building with eBPF support.
40 lines
1.5 KiB
SYSTEMD
40 lines
1.5 KiB
SYSTEMD
[Unit]
|
|
Description=Network Manager
|
|
Documentation=man:NetworkManager(8)
|
|
Wants=network.target
|
|
After=network-pre.target dbus.service
|
|
Before=network.target @DISTRO_NETWORK_SERVICE@
|
|
BindsTo=dbus.service
|
|
|
|
[Service]
|
|
Type=dbus
|
|
BusName=org.freedesktop.NetworkManager
|
|
ExecReload=/usr/bin/busctl call org.freedesktop.NetworkManager /org/freedesktop/NetworkManager org.freedesktop.NetworkManager Reload u 0
|
|
#ExecReload=/bin/kill -HUP $MAINPID
|
|
ExecStart=@sbindir@/NetworkManager --no-daemon
|
|
Restart=on-failure
|
|
# NM doesn't want systemd to kill its children for it
|
|
KillMode=process
|
|
|
|
# With a huge number of interfaces, starting can take a long time.
|
|
TimeoutStartSec=600
|
|
|
|
# CAP_DAC_OVERRIDE: required to open /run/openvswitch/db.sock socket.
|
|
CapabilityBoundingSet=CAP_NET_ADMIN CAP_DAC_OVERRIDE CAP_NET_RAW CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_MODULE CAP_AUDIT_WRITE CAP_KILL CAP_SYS_CHROOT @SERVICE_EXTRA_CAPABILITIES@
|
|
|
|
ProtectSystem=true
|
|
ProtectHome=read-only
|
|
|
|
# We require file descriptors for DHCP etc. When activating many interfaces,
|
|
# the default limit of 1024 is easily reached.
|
|
LimitNOFILE=65536
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
Also=NetworkManager-dispatcher.service
|
|
|
|
# We want to enable NetworkManager-wait-online.service whenever this service
|
|
# is enabled. NetworkManager-wait-online.service has
|
|
# WantedBy=network-online.target, so enabling it only has an effect if
|
|
# network-online.target itself is enabled or pulled in by some other unit.
|
|
Also=NetworkManager-wait-online.service
|