mirror of
https://github.com/danderson/netboot.git
synced 2025-12-09 11:32:04 +01:00
Resolves #57: Add RF_NETLINK to RestrictedAddressFamilies in SystemD unit
for pixiecore Signed-off-by: Naadir Jeewa <naadir@randomvariable.co.uk>
This commit is contained in:
parent
da5542b8ac
commit
cc33920b4f
@ -26,7 +26,7 @@ ProtectControlGroups=true
|
|||||||
ProtectKernelModules=true
|
ProtectKernelModules=true
|
||||||
NoNewPrivileges=true
|
NoNewPrivileges=true
|
||||||
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io
|
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io
|
||||||
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
|
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user