From cc33920b4f3296801a64d731d269978116f40d92 Mon Sep 17 00:00:00 2001
From: Naadir Jeewa <naadir@randomvariable.co.uk>
Date: Wed, 7 Feb 2018 19:00:58 +0000
Subject: [PATCH] Resolves #57: Add RF_NETLINK to RestrictedAddressFamilies in
 SystemD unit for pixiecore

Signed-off-by: Naadir Jeewa <naadir@randomvariable.co.uk>
---
 pixiecore/pixiecore.service | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pixiecore/pixiecore.service b/pixiecore/pixiecore.service
index 20a56c9..d679b44 100644
--- a/pixiecore/pixiecore.service
+++ b/pixiecore/pixiecore.service
@@ -26,7 +26,7 @@ ProtectControlGroups=true
 ProtectKernelModules=true
 NoNewPrivileges=true
 SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io
-RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
 
 [Install]
 WantedBy=multi-user.target