import quincy beta 17.1.0

[ceph.git] / ceph / systemd / ceph-mon@.service.in

diff --git a/ceph/systemd/ceph-mon@.service.in b/ceph/systemd/ceph-mon@.service.in
index b7c92f278e345d0e14c501bb0f24c067d55881e3..2eba83c3cc9bcc5dcfeefd8bc2491a0b13574b58 100644 (file)
--- a/ceph/systemd/ceph-mon@.service.in
+++ b/ceph/systemd/ceph-mon@.service.in
@@ -20,7 +20,10 @@ LockPersonality=true
 MemoryDenyWriteExecute=true
 # Need NewPrivileges via `sudo smartctl`
 NoNewPrivileges=false
-PrivateDevices=yes
+# We need access to block devices to check the health of the disk backing the
+# monitor DB store. It can be set to `true` if you're not interested in that
+# feature.
+PrivateDevices=false
 PrivateTmp=true
 ProtectControlGroups=true
 ProtectHome=true