From d69b766a3ac7878171db5fdc23a5826bf4d22f35 Mon Sep 17 00:00:00 2001 From: runningnoodle <94857015+runningnoodle@users.noreply.github.com> Date: Wed, 12 Jul 2023 10:12:54 -0400 Subject: [PATCH] Enable extra system calls in systemd service (#1309) --- listmonk@.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/listmonk@.service b/listmonk@.service index 9d452ad..9bab1d1 100644 --- a/listmonk@.service +++ b/listmonk@.service @@ -35,7 +35,7 @@ SystemCallArchitectures=native # Only enable a reasonable set of system calls. # see: https://www.freedesktop.org/software/systemd/man/systemd.exec.html#SystemCallFilter= SystemCallFilter=@system-service -SystemCallFilter=~@privileged @resources +SystemCallFilter=~@privileged # ProtectSystem=strict, which is implied by DynamicUser=True, already disabled write calls # to the entire filesystem hierarchy, leaving only /dev/, /proc/, and /sys/ writable. # listmonk doesn’t need access to those so might as well disable them.