Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-12-22 13:45:02 -05:00
Code Issues Packages Projects Releases Wiki Activity

avoid disallowing chown syscall for certbot-renew

Browse Source
This commit is contained in:
Daniel Micay 2022-09-14 18:24:08 -04:00
parent 6c58739dc8
commit dfd3fc861b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
systemd/system/certbot-renew.service.d/local.conf
View File

@ -25,5 +25,5 @@ RestrictNamespaces=true
RestrictRealtime=true RestrictRealtime=true
RestrictSUIDSGID=true RestrictSUIDSGID=true
SystemCallArchitectures=native SystemCallArchitectures=native
SystemCallFilter=@system-service @chown SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources @obsolete SystemCallFilter=~@resources @obsolete