gonic: Set PrivateTmp=true for new go-sqlite3 behavior (#530789)

2026-06-25 11:37:20 +00:00
parent 1b6d5c2323 b3b5f2033b
commit b14a5d3de3
1 changed files with 1 additions and 0 deletions
@@ -93,6 +93,7 @@ in
        ];
        RestrictNamespaces = true;
        PrivateDevices = true;
+        PrivateTmp = true;
        PrivateUsers = true;
        ProtectClock = true;
        ProtectControlGroups = true;