From 7da104eb11d3df12f89489a7d728b8b5df8425a8 Mon Sep 17 00:00:00 2001 From: Yurii Izorkin Date: Tue, 27 Apr 2021 21:34:53 +0300 Subject: [PATCH] templates/systemd/mastodon: optimize SystemCallFilters (#16127) --- dist/mastodon-sidekiq.service | 2 +- dist/mastodon-web.service | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/dist/mastodon-sidekiq.service b/dist/mastodon-sidekiq.service index e171475b5..9dd21b8a0 100644 --- a/dist/mastodon-sidekiq.service +++ b/dist/mastodon-sidekiq.service @@ -38,7 +38,7 @@ PrivateMounts=true ProtectClock=true # System Call Filtering SystemCallArchitectures=native -SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap +SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap [Install] WantedBy=multi-user.target diff --git a/dist/mastodon-web.service b/dist/mastodon-web.service index fd9e28770..c106a4860 100644 --- a/dist/mastodon-web.service +++ b/dist/mastodon-web.service @@ -38,7 +38,7 @@ PrivateMounts=true ProtectClock=true # System Call Filtering SystemCallArchitectures=native -SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap +SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @resources @setuid @swap [Install] WantedBy=multi-user.target