allow permissions openat mkdir

since required in Qubes Debian templates
Kicksecure · Jul 1, 2019 · 3c176ce · 3c176ce
1 parent f26ad14
commit 3c176ce
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/systemd/system/proc-hidepid.service b/lib/systemd/system/proc-hidepid.service
@@ -21,7 +21,7 @@ NoNewPrivileges=true
 RestrictRealtime=true
 SystemCallArchitectures=native
 RestrictNamespaces=true
-SystemCallFilter=mount munmap access read open close stat fstat lstat mmap mprotect brk rt_sigaction rt_sigprocmask execve readlink getrlimit getuid getgid geteuid getegid statfs prctl arch_prctl set_tid_address newfstatat set_robust_list
+SystemCallFilter=mount munmap access read open close stat fstat lstat mmap mprotect brk rt_sigaction rt_sigprocmask execve readlink getrlimit getuid getgid geteuid getegid statfs prctl arch_prctl set_tid_address newfstatat set_robust_list openat mkdir
 
 [Install]
 WantedBy=multi-user.target