Hi Alberto and Jim,

On 2016-05-10 12:45 PM, Alberto Gonzalez Iniesta wrote:
> So sorry took me this long to answer. I'm pretty sure this is related to
> capabilities. Could try copying /lib/systemd/system/openvpn@.service to
> /etc/systemd/system/openvpn@.service and removin the
> CapabilityBoundingSet line from it?

Systemd provides a nice command for just this:

  systemctl edit openvpn@.service

This will run $EDITOR and you'll be able to override just the part that
you need. In Jim's case, setting CapabilityBoundingSet to be empty
should do it:

[Service]
CapabilityBoundingSet=


HTH,
Simon

Reply via email to