[systemd file] add note about commenting sandboxing section for

troubleshooting
3 years ago · ad48c8a881
parent 0aa96a936f
commit ad48c8a881
1 changed files with 2 additions and 0 deletions
--- a/systemd/step-ca.service
+++ b/systemd/step-ca.service
@ -32,6 +32,8 @@ NoNewPrivileges=yes
 ; Sandboxing
 ; This sandboxing works with YubiKey PIV (via pcscd HTTP API), but it is likely
 ; too restrictive for PKCS#11 HSMs.
+;
+; NOTE: Comment out the rest of this section for troubleshooting.
 ProtectSystem=full
 ProtectHome=true
 RestrictNamespaces=true