diff --git a/conf/systemd.service b/conf/systemd.service index 82142f7..c9aed58 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -33,7 +33,8 @@ ProtectKernelModules=yes ProtectKernelTunables=yes LockPersonality=yes SystemCallArchitectures=native -SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged +#TODO : list all system call that could be needed by the application +#SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged # Denying access to capabilities that should not be relevant for webapps # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html diff --git a/scripts/_common.sh b/scripts/_common.sh index 156ced8..9ce0c03 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -49,7 +49,7 @@ myynh_setup_python_venv() { set -x ynh_exec_as $app $data_dir/venv/bin/python3 -m ensurepip ynh_exec_as $app $data_dir/venv/bin/pip3 install --upgrade wheel pip setuptools - ynh_exec_as $app $data_dir/venv/bin/pip3 install --no-deps -r "$data_dir/requirements.txt" + ynh_exec_as $app $data_dir/venv/bin/pip3 install -r "$data_dir/requirements.txt" ) }