nixos/endlessh-go: set proper SystemCallFilter

2022-10-24 22:21:02 +10:00
parent db029623b7
commit 7415970a3e
1 changed files with 1 additions and 1 deletions
@@ -126,7 +126,7 @@ in
          RestrictRealtime = true;
          RestrictSUIDSGID = true;
          SystemCallArchitectures = "native";
-          SystemCallFilter = [ "@system-service" "~@resources" "~@privileged" ];
+          SystemCallFilter = [ "@system-service" "~@privileged" ];
        };
    };