Filter @resources from the list of allowed syscalls

This commit is contained in:
Florian Preinstorfer
2026-06-22 11:46:17 +02:00
committed by nblock
parent 6e0814a845
commit f6865fb40c
+1
View File
@@ -45,6 +45,7 @@ StateDirectoryMode=0750
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged
SystemCallFilter=~@resources
UMask=0077
[Install]