add missing syscalls (#7521)

2026-06-12 15:51:12 +00:00 · 2023-07-19 21:42:52 +02:00
parent cc9f8129af
commit 86f3f640bf
1 changed files with 1 additions and 0 deletions
@@ -29,6 +29,7 @@ RestrictNamespaces=true
 RestrictSUIDSGID=true
 SystemCallArchitectures=native
 SystemCallFilter=@system-service
+SystemCallFilter=landlock_add_rule landlock_create_ruleset landlock_restrict_self seccomp
 SystemCallFilter=~@clock @module @mount @reboot @swap @privileged
 UMask=0027