Skip to content
Snippets Groups Projects
Unverified Commit 7da104eb authored by Yurii Izorkin's avatar Yurii Izorkin Committed by GitHub
Browse files

templates/systemd/mastodon: optimize SystemCallFilters (#16127)

parent 0bc90968
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
dist/mastodon-sidekiq.service
+ 1
− 1
View file @ 7da104eb
......@@ -38,7 +38,7 @@ PrivateMounts=true
ProtectClock=true
# System Call Filtering
SystemCallArchitectures=native
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap
[Install]
WantedBy=multi-user.target
dist/mastodon-web.service
+ 1
− 1
View file @ 7da104eb
......@@ -38,7 +38,7 @@ PrivateMounts=true
ProtectClock=true
# System Call Filtering
SystemCallArchitectures=native
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @resources @setuid @swap
[Install]
WantedBy=multi-user.target
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment