From 4897443d2439f58889e8d558d4ac1944d70f2655 Mon Sep 17 00:00:00 2001 From: Christoph Settgast Date: Sun, 4 Sep 2022 22:49:15 +0200 Subject: [PATCH] Fix starting of coturn-synapse coturn won't start with setuid filter, see #327 Fix tested there, merge into package. Closes: #327 --- conf/coturn-synapse.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/coturn-synapse.service b/conf/coturn-synapse.service index ebbf25c..724ef01 100644 --- a/conf/coturn-synapse.service +++ b/conf/coturn-synapse.service @@ -38,7 +38,7 @@ ProtectControlGroups=yes ProtectKernelModules=yes ProtectKernelTunables=yes LockPersonality=yes -SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap +SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @swap # Denying access to capabilities that should not be relevant for webapps # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html