Home Explore Help
Register Sign In
RISCI_ATOM
/
mastodon
mirror of https://github.com/tootsuite/mastodon.git
1
0
Fork 0
Files Issues 8 Wiki
Browse Source

templates/systemd/mastodon: optimize SystemCallFilters (#16127)

Yurii Izorkin 3 years ago
parent
0bc909687a
commit
7da104eb11
2 changed files with 2 additions and 2 deletions
Split View Show Diff Stats
  1. 1 1
      dist/mastodon-sidekiq.service
  2. 1 1
      dist/mastodon-web.service

+ 1 - 1
dist/mastodon-sidekiq.service
View File 

@@ -38,7 +38,7 @@ PrivateMounts=true
 
 ProtectClock=true
 
 # System Call Filtering
 
 SystemCallArchitectures=native
 
-SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
 
+SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap
 
 
 [Install]
 
 WantedBy=multi-user.target

+ 1 - 1
dist/mastodon-web.service
View File 

@@ -38,7 +38,7 @@ PrivateMounts=true
 
 ProtectClock=true
 
 # System Call Filtering
 
 SystemCallArchitectures=native
 
-SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
 
+SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @resources @setuid @swap
 
 
 [Install]
 
 WantedBy=multi-user.target