diff --git a/conf/systemd.service b/conf/systemd.service index d43f554..26cd235 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -31,7 +31,7 @@ ProtectControlGroups=yes ProtectKernelModules=no ProtectKernelTunables=no LockPersonality=no -#SystemCallFilter= +SystemCallFilter= # Denying access to capabilities that should not be relevant for webapps # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html