Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add missing syscalls for workers #2212

Merged
merged 3 commits into from
Mar 28, 2024
Merged

add missing syscalls for workers #2212

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
70c8b0e
add missing syscalls
tugytur Nov 7, 2023
7fe08ba
Merge branch 'master' into add-systemd-syscalls
s0me0ne-unkn0wn Mar 28, 2024
498177d
Merge branch 'master' into add-systemd-syscalls
bkchr Mar 28, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions polkadot/scripts/packaging/polkadot.service
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,12 +25,13 @@ ProtectKernelTunables=true
ProtectSystem=strict
RemoveIPC=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX
RestrictNamespaces=true
RestrictNamespaces=false
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=landlock_add_rule landlock_create_ruleset landlock_restrict_self seccomp
SystemCallFilter=~@clock @module @mount @reboot @swap @privileged
SystemCallFilter=landlock_add_rule landlock_create_ruleset landlock_restrict_self seccomp mount umount2
SystemCallFilter=~@clock @module @reboot @swap @privileged
SystemCallFilter=pivot_root
UMask=0027

[Install]
Expand Down
Loading