diff --git a/conf/seafile.service b/conf/seafile.service index 8a5dbc1..5e2fb37 100644 --- a/conf/seafile.service +++ b/conf/seafile.service @@ -24,7 +24,7 @@ ProtectControlGroups=yes ProtectKernelModules=yes ProtectKernelTunables=yes LockPersonality=yes -SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap +SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @swap # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD