Filter @resources from the list of allowed syscalls

This commit is contained in:
Florian Preinstorfer authored and nblock committed 2026-06-25 11:07:10 +02:00
1 parent 6e0814a845
commit f6865fb40c
1 file changed
+1
+1
View File
@@ -45,6 +45,7 @@ StateDirectoryMode=0750
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged
SystemCallFilter=~@resources
UMask=0077
[Install]