mirror of
				https://github.com/bol-van/zapret.git
				synced 2025-11-04 06:52:36 +09:00 
			
		
		
		
	remove seccomp from systemd units
This commit is contained in:
		@@ -56,9 +56,6 @@ RemoveIPC=true
 | 
				
			|||||||
RestrictNamespaces=true
 | 
					RestrictNamespaces=true
 | 
				
			||||||
RestrictRealtime=true
 | 
					RestrictRealtime=true
 | 
				
			||||||
RestrictSUIDSGID=true
 | 
					RestrictSUIDSGID=true
 | 
				
			||||||
SystemCallArchitectures=native
 | 
					 | 
				
			||||||
SystemCallFilter=@system-service
 | 
					 | 
				
			||||||
SystemCallFilter=~@resources
 | 
					 | 
				
			||||||
UMask=0077
 | 
					UMask=0077
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[Install]
 | 
					[Install]
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -55,8 +55,6 @@ RemoveIPC=true
 | 
				
			|||||||
RestrictNamespaces=true
 | 
					RestrictNamespaces=true
 | 
				
			||||||
RestrictRealtime=true
 | 
					RestrictRealtime=true
 | 
				
			||||||
RestrictSUIDSGID=true
 | 
					RestrictSUIDSGID=true
 | 
				
			||||||
SystemCallArchitectures=native
 | 
					 | 
				
			||||||
SystemCallFilter=@system-service
 | 
					 | 
				
			||||||
UMask=0077
 | 
					UMask=0077
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[Install]
 | 
					[Install]
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user