nixos/prosody-filer: set proper SystemCallFilter

This commit is contained in:
MidAutumnMoon
2022-10-25 16:14:24 +08:00
parent 7742cd543d
commit 5c983ac37b
@@ -79,7 +79,7 @@ in {
LockPersonality = true;
RemoveIPC = true;
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];
SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];
SystemCallFilter = [ "@system-service" "~@privileged" ];
};
};
};