[systemd-devel] disable "InaccessiblePaths" with a dropin

[Michael Chapman]

On Thu, 9 Jan 2020, Reindl Harald wrote:
> Hi
> 
> deployed http.service contains:
> 
>  * InaccessiblePaths=-/usr/bin/bash
>  * InaccessiblePaths=-/usr/bin/dash
>  * InaccessiblePaths=-/usr/bin/sh
> 
> now there is one instance where passthru() in a php script is desired
> 
> /etc/systemd/system/http.service/allow-paths.conf:
> ReadOnlyPaths=-/usr/bin/bash
> ReadOnlyPaths=-/usr/bin/dash
> ReadOnlyPaths=-/usr/bin/sh
> 
> that don't work - is there a way to disable specific "InaccessiblePaths"
> from the main unit with a dropin other then clone the whole httpd.service?

An empty:

    InaccessiblePaths=

in the drop-in should do it. In general "list-valued" directives are 
emptied with a blank value.