diff --git a/packaging/deb/systemd/grafana-server.service b/packaging/deb/systemd/grafana-server.service index 81978d545e1..65db8439278 100644 --- a/packaging/deb/systemd/grafana-server.service +++ b/packaging/deb/systemd/grafana-server.service @@ -29,7 +29,7 @@ TimeoutStopSec=20 CapabilityBoundingSet= DeviceAllow= LockPersonality=true -MemoryDenyWriteExecute=true +MemoryDenyWriteExecute=false NoNewPrivileges=true PrivateDevices=true PrivateTmp=true @@ -50,9 +50,6 @@ RestrictNamespaces=true RestrictRealtime=true RestrictSUIDSGID=true SystemCallArchitectures=native -SystemCallFilter=@system-service -SystemCallFilter=~@privileged -SystemCallFilter=~@resources UMask=0027 [Install] diff --git a/packaging/rpm/systemd/grafana-server.service b/packaging/rpm/systemd/grafana-server.service index 6469a6cfdbf..2636656c974 100644 --- a/packaging/rpm/systemd/grafana-server.service +++ b/packaging/rpm/systemd/grafana-server.service @@ -28,7 +28,7 @@ TimeoutStopSec=20 CapabilityBoundingSet= DeviceAllow= LockPersonality=true -MemoryDenyWriteExecute=true +MemoryDenyWriteExecute=false NoNewPrivileges=true PrivateDevices=true PrivateTmp=true @@ -49,9 +49,6 @@ RestrictNamespaces=true RestrictRealtime=true RestrictSUIDSGID=true SystemCallArchitectures=native -SystemCallFilter=@system-service -SystemCallFilter=~@privileged -SystemCallFilter=~@resources UMask=0027 [Install]