Merge pull request #163491 from peperunas/patch-1

2022-03-10 13:34:58 +01:00
parent 83333c3e77 81781c338d
commit ab13e4ff7f
1 changed files with 3 additions and 2 deletions
@@ -73,7 +73,8 @@ in
        PrivateDevices = true;
        PrivateUsers = true;

-        ProtectClock = true;
+        # Disabled as it does not allow Jellyfin to interface with CUDA devices
+        # ProtectClock = true;
        ProtectControlGroups = true;
        ProtectHostname = true;
        ProtectKernelLogs = true;
@@ -84,7 +85,7 @@ in

        RestrictNamespaces = true;
        # AF_NETLINK needed because Jellyfin monitors the network connection
-        RestrictAddressFamilies = [ "AF_NETLINK" "AF_INET" "AF_INET6" ];
+        RestrictAddressFamilies = [ "AF_NETLINK" "AF_INET" "AF_INET6" "AF_UNIX" ];
        RestrictRealtime = true;
        RestrictSUIDSGID = true;