mirror of
https://github.com/danderson/netboot.git
synced 2025-12-07 18:41:41 +01:00
Resolves #57: Add RF_NETLINK to RestrictedAddressFamilies in SystemD unit
for pixiecore Signed-off-by: Naadir Jeewa <naadir@randomvariable.co.uk>
This commit is contained in:
parent
da5542b8ac
commit
cc33920b4f
@ -26,7 +26,7 @@ ProtectControlGroups=true
|
||||
ProtectKernelModules=true
|
||||
NoNewPrivileges=true
|
||||
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io
|
||||
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
|
||||
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user