Merge pull request #262678 from plumelo/feat/esphome-proc-subset

esphome: remove ProcSubset from serviceConfig
2023-10-23 00:46:21 +02:00
parent 8082879a82 bff068e514
commit 3244b1eaef
1 changed files with 1 additions and 1 deletions
@@ -112,7 +112,7 @@ in
        ProtectKernelModules = true;
        ProtectKernelTunables = true;
        ProtectProc = "invisible";
-        ProcSubset = "pid";
+        ProcSubset = "all"; # Using "pid" breaks bwrap
        ProtectSystem = "strict";
        #RemoveIPC = true; # Implied by DynamicUser
        RestrictAddressFamilies = [