From fd5ebb2fbd66ef925dd2959c23387f053454cbb0 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Mon, 1 Nov 2021 23:59:03 +0100 Subject: [PATCH] Disable RestrictAddressFamilies safety setting --- conf/systemd.service | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/conf/systemd.service b/conf/systemd.service index fcd502c..442545c 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -17,7 +17,8 @@ Restart=always NoNewPrivileges=yes PrivateTmp=yes PrivateDevices=yes -RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 +#RestrictAddressFamilies disabled, prevents any write access on the app +#RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 RestrictNamespaces=yes RestrictRealtime=yes DevicePolicy=closed