diff options
| author | Starfall <us@starfall.systems> | 2021-05-11 11:19:04 -0500 |
|---|---|---|
| committer | Starfall <us@starfall.systems> | 2021-05-11 11:19:04 -0500 |
| commit | d56731a0b9d73c48bbfbced8732e25587ba892a4 (patch) | |
| tree | d3830ce2e0292ce07336496e40882c222f455a33 /dist | |
| parent | 459a36ab7303db4ee59945b4b2121b25cc86eb38 (diff) | |
| parent | ffc3f8eebe134ca9b18af73aa29eaa1627082e40 (diff) | |
Merge branch 'glitch'
Diffstat (limited to 'dist')
| -rw-r--r-- | dist/mastodon-sidekiq.service | 2 | ||||
| -rw-r--r-- | dist/mastodon-streaming.service | 2 | ||||
| -rw-r--r-- | dist/mastodon-web.service | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/dist/mastodon-sidekiq.service b/dist/mastodon-sidekiq.service index 0bb0a800f..9dd21b8a0 100644 --- a/dist/mastodon-sidekiq.service +++ b/dist/mastodon-sidekiq.service @@ -38,7 +38,7 @@ PrivateMounts=true ProtectClock=true # System Call Filtering SystemCallArchitectures=native -SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @reboot @resources @setuid @swap +SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap [Install] WantedBy=multi-user.target diff --git a/dist/mastodon-streaming.service b/dist/mastodon-streaming.service index 1443ca1c8..0befc529a 100644 --- a/dist/mastodon-streaming.service +++ b/dist/mastodon-streaming.service @@ -38,7 +38,7 @@ PrivateMounts=true ProtectClock=true # System Call Filtering SystemCallArchitectures=native -SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @reboot @resources @setuid @swap +SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap [Install] WantedBy=multi-user.target diff --git a/dist/mastodon-web.service b/dist/mastodon-web.service index 3383f33e3..c106a4860 100644 --- a/dist/mastodon-web.service +++ b/dist/mastodon-web.service @@ -38,7 +38,7 @@ PrivateMounts=true ProtectClock=true # System Call Filtering SystemCallArchitectures=native -SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @reboot @resources @setuid @swap +SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @resources @setuid @swap [Install] WantedBy=multi-user.target |