The `ceph-mon` daemon needs access to block devices to check the health of the
disk that backs its DB store (#24151).
Fixes: https://tracker.ceph.com/issues/52416
Signed-off-by: Benoît Knecht <bknecht@protonmail.ch>
(cherry picked from commit
96de1c97608b81ab80d4be3160ac05d11d4b23c8)
MemoryDenyWriteExecute=true
# Need NewPrivileges via `sudo smartctl`
NoNewPrivileges=false
-PrivateDevices=yes
+# We need access to block devices to check the health of the disk backing the
+# monitor DB store. It can be set to `true` if you're not interested in that
+# feature.
+PrivateDevices=false
PrivateTmp=true
ProtectControlGroups=true
ProtectHome=true