tugy c106dbd095 add missing syscalls for workers (#2212) ...

# Description

Since the binary split additional syscalls are getting blocked in
relation to the workers.

With the hardened systemd file it shows the following warning:

```
Cannot fully enable landlock, a Linux kernel security feature. Running validation of malicious PVF code has a higher risk of compromising this machine. Consider upgrading the kernel version for maximum security. status=Ok(NotEnforced) abi=1
```

For it to work we need to allow additionally:
- mount
- umount2
- pivot_root

and set `RestrictNamespaces=false`

Added new line `SystemCallFilter=pivot_root` because otherwise it would
get blocked by ~\@\privileged

Co-authored-by: s0me0ne-unkn0wn <48632512+s0me0ne-unkn0wn@users.noreply.github.com>
Co-authored-by: Bastian Köcher <git@kchr.de>

2024-03-28 14:07:52 +00:00

..

list-syscalls

change prepare worker to use fork instead of threads (#1685)

2023-11-14 18:50:18 +01:00

packaging

add missing syscalls for workers (#2212)

2024-03-28 14:07:52 +00:00

adder-collator.sh

Remove real-overseer 🎉 (#2834)

2021-04-08 20:24:06 +02:00

build-only-wasm.sh

Add forklift to remaining jobs (#3236)

2024-02-09 12:40:19 +00:00

common.sh

copy scripts

2018-08-15 13:40:49 +02:00

prepare-test-net.sh

Add BEEFY capabilities to Westend and Kusama (#7591)

2023-08-22 09:08:54 +00:00

release.sh

Automation for new release process (#1754)

2020-10-20 18:24:54 +02:00

two-node-local-net.sh

Remove real-overseer 🎉 (#2834)

2021-04-08 20:24:06 +02:00