closed-social
/
mastodon
3
0
Fork 2
Code Issues 5 Pull Requests 0 Projects 0 Releases 3 Wiki Activity
Browse Source

templates/systemd/mastodon: optimize SystemCallFilters (#16127)

closed-social-v3
Yurii Izorkin 3 years ago
committed by GitHub
parent
0bc909687a
commit
7da104eb11
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. +1
    -1
      dist/mastodon-sidekiq.service
  2. +1
    -1
      dist/mastodon-web.service

+ 1
- 1
dist/mastodon-sidekiq.service View File

@ -38,7 +38,7 @@ PrivateMounts=true
ProtectClock=true
# System Call Filtering
SystemCallArchitectures=native
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap
[Install]
WantedBy=multi-user.target

+ 1
- 1
dist/mastodon-web.service View File

@ -38,7 +38,7 @@ PrivateMounts=true
ProtectClock=true
# System Call Filtering
SystemCallArchitectures=native
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @resources @setuid @swap
[Install]
WantedBy=multi-user.target

Write Preview
Loading…
Cancel
Save