diff options
Diffstat (limited to 'units/systemd-portabled.service.in')
| -rw-r--r-- | units/systemd-portabled.service.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/units/systemd-portabled.service.in b/units/systemd-portabled.service.in index a868f61dba..a44cdb30a4 100644 --- a/units/systemd-portabled.service.in +++ b/units/systemd-portabled.service.in @@ -20,7 +20,7 @@ CapabilityBoundingSet=CAP_KILL CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_SETGID CAP_SYS_C MemoryDenyWriteExecute=yes RestrictRealtime=yes RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 -SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @obsolete @raw-io @reboot @swap +SystemCallFilter=@system-service @mount SystemCallArchitectures=native LockPersonality=yes IPAddressDeny=any |