From 3abb3adc3cc274a686206c0e89d9e73b310d19fc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Josu=C3=A9=20Tille?= <josue@tille.ch>
Date: Mon, 13 May 2024 22:31:53 +0200
Subject: [PATCH] Remove systemd sandboxing which break app feature

---
 conf/systemd.service | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/conf/systemd.service b/conf/systemd.service
index 310c2aa..6d7e2ba 100644
--- a/conf/systemd.service
+++ b/conf/systemd.service
@@ -17,11 +17,7 @@ PrivateTmp=yes
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
 RestrictNamespaces=yes
 RestrictRealtime=yes
-DevicePolicy=closed
-ProtectClock=yes
 ProtectHostname=yes
-ProtectProc=invisible
-ProtectSystem=full
 ProtectControlGroups=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes