From 0052e6a21b666dab4e5c3f93d46142f3c52c2124 Mon Sep 17 00:00:00 2001
From: Cian Johnston <cian@coder.com>
Date: Tue, 28 Jun 2022 16:02:42 +0100
Subject: [PATCH] add CAP_NET_BIND_SERVICE to coder.service (#2699)

* add CAP_NET_BIND_SERVICE to systemd unit

Co-authored-by: Mathias Fredriksson <mafredri@gmail.com>
---
 coder.service | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/coder.service b/coder.service
index 928df1ff1c..8c8f6a3642 100644
--- a/coder.service
+++ b/coder.service
@@ -16,7 +16,7 @@ ProtectSystem=full
 PrivateTmp=yes
 PrivateDevices=yes
 SecureBits=keep-caps
-AmbientCapabilities=CAP_IPC_LOCK
+AmbientCapabilities=CAP_IPC_LOCK CAP_NET_BIND_SERVICE
 CacheDirectory=coder
 CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK CAP_NET_BIND_SERVICE
 KillSignal=SIGINT