From d7dd38a9346a309c58365ae25114eb8fde037917 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Josu=C3=A9=20Tille?= Date: Fri, 26 Apr 2024 21:42:20 +0200 Subject: [PATCH] Remove syscall filter for monitorix on @mount --- conf/systemd.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/systemd.service b/conf/systemd.service index 97d619c..310c2aa 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -27,7 +27,7 @@ ProtectKernelModules=yes ProtectKernelTunables=yes LockPersonality=yes SystemCallArchitectures=native -SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @cpu-emulation @swap +SystemCallFilter=~@clock @debug @module @obsolete @reboot @cpu-emulation @swap # # Denying access to capabilities that should not be relevant for webapps # # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html