From 7e3061e7ace0e973378a17de04a2692142e1a6c1 Mon Sep 17 00:00:00 2001
From: sebres <serg.brester@sebres.de>
Date: Wed, 15 Apr 2020 17:35:04 +0200
Subject: [PATCH] fail2ban.service systemd unit template: don't add user site
 directory to python system path (avoids accessing of `/root/.local`
 directory, prevents SE linux audit warning at daemon startup, gh-2688)

---
 files/fail2ban.service.in | 1 +
 1 file changed, 1 insertion(+)

diff --git a/files/fail2ban.service.in b/files/fail2ban.service.in
index 5e540545..9a245c61 100644
--- a/files/fail2ban.service.in
+++ b/files/fail2ban.service.in
@@ -6,6 +6,7 @@ PartOf=iptables.service firewalld.service ip6tables.service ipset.service nftabl
 
 [Service]
 Type=simple
+Environment="PYTHONNOUSERSITE=1"
 ExecStartPre=/bin/mkdir -p /run/fail2ban
 ExecStart=@BINDIR@/fail2ban-server -xf start
 # if should be logged in systemd journal, use following line or set logtarget to sysout in fail2ban.local