Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-06-29 07:42:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

avoid disallowing chown syscall for certbot-renew

Browse Source
This commit is contained in:
Daniel Micay 2022-09-14 18:24:08 -04:00
parent 6c58739dc8
commit dfd3fc861b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
systemd/system/certbot-renew.service.d/local.conf
View File

@ -25,5 +25,5 @@ RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=@system-service @chown
SystemCallFilter=~@privileged @resources @obsolete
SystemCallFilter=@system-service
SystemCallFilter=~@resources @obsolete