diff --git a/polkadot/scripts/packaging/polkadot.service b/polkadot/scripts/packaging/polkadot.service index 6d6a9f6f66..7fb549c97f 100644 --- a/polkadot/scripts/packaging/polkadot.service +++ b/polkadot/scripts/packaging/polkadot.service @@ -29,6 +29,7 @@ RestrictNamespaces=true RestrictSUIDSGID=true SystemCallArchitectures=native SystemCallFilter=@system-service +SystemCallFilter=landlock_add_rule landlock_create_ruleset landlock_restrict_self seccomp SystemCallFilter=~@clock @module @mount @reboot @swap @privileged UMask=0027