Skip to content

Commit

Permalink
Enable extra system calls in systemd service (#1309)
Browse files Browse the repository at this point in the history
  • Loading branch information
runningnoodle authored Jul 12, 2023
1 parent 329b645 commit d69b766
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion listmonk@.service
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ SystemCallArchitectures=native
# Only enable a reasonable set of system calls.
# see: https://www.freedesktop.org/software/systemd/man/systemd.exec.html#SystemCallFilter=
SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources
SystemCallFilter=~@privileged
# ProtectSystem=strict, which is implied by DynamicUser=True, already disabled write calls
# to the entire filesystem hierarchy, leaving only /dev/, /proc/, and /sys/ writable.
# listmonk doesn’t need access to those so might as well disable them.
Expand Down

0 comments on commit d69b766

Please # to comment.