me/glitchier-soc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

templates/systemd/mastodon: optimize SystemCallFilters (#16127)

Browse source
This commit is contained in:
Yurii Izorkin 2021-04-27 21:34:53 +03:00 committed by GitHub
parent 02941921a6
commit 54a83a442d
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
dist/mastodon-sidekiq.service vendored
View file

@ -38,7 +38,7 @@ PrivateMounts=true
ProtectClock=true
# System Call Filtering
SystemCallArchitectures=native
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap
[Install]
WantedBy=multi-user.target

2
dist/mastodon-web.service vendored
View file

@ -38,7 +38,7 @@ PrivateMounts=true
ProtectClock=true
# System Call Filtering
SystemCallArchitectures=native
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @resources @setuid @swap
[Install]
WantedBy=multi-user.target