otrs: allow home directory access

diff --git a/cookbooks/otrs/recipes/debian.rb b/cookbooks/otrs/recipes/debian.rb
index fac61b6f8859a544c58f7d90b311b9da14ff388b..a51af6ba0076cf1ae9e4b61fd647391235fdcd6d 100644 (file)
--- a/cookbooks/otrs/recipes/debian.rb
+++ b/cookbooks/otrs/recipes/debian.rb
@@ -98,7 +98,7 @@ systemd_service "otrs" do
   exec_start "/usr/share/otrs/bin/otrs.Daemon.pl start"
   private_tmp true
   protect_system "strict"
-  protect_home true
+  protect_home "read-only"
   runtime_directory "otrs"
   runtime_directory_mode 0o770
   runtime_directory_preserve true