nixos/nats: set proper SystemCallFilter

2022-10-25 16:47:46 +08:00
parent afb8d0e5a6
commit 9b8fd74d68
1 changed files with 1 additions and 1 deletions
@@ -137,7 +137,7 @@ in {
          RestrictNamespaces = true;
          RestrictRealtime = true;
          RestrictSUIDSGID = true;
-          SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];
+          SystemCallFilter = [ "@system-service" "~@privileged" ];
          UMask = "0077";
        }
      ];