Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-07-26 00:05:17 -04:00
Code Issues Projects Releases Packages Wiki Activity

avoid disallowing chown syscall for certbot-renew

Browse source
This commit is contained in:
Daniel Micay 2022-09-14 18:24:08 -04:00
parent 6c58739dc8
commit dfd3fc861b
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
systemd/system/certbot-renew.service.d/local.conf
View file

@ -25,5 +25,5 @@ RestrictNamespaces=true
RestrictRealtime=true RestrictRealtime=true
RestrictSUIDSGID=true RestrictSUIDSGID=true
SystemCallArchitectures=native SystemCallArchitectures=native
SystemCallFilter=@system-service @chown SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources @obsolete SystemCallFilter=~@resources @obsolete