Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-10-01 00:55:42 -04:00
Code Issues Packages Projects Releases Wiki Activity

add chown to certbot syscall allowlist

Browse Source
This commit is contained in:
Daniel Micay 2022-08-28 14:58:21 -04:00
parent 8482ac5144
commit fd397326ec
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
systemd/system/certbot-renew.service.d/local.conf
View File

@ -25,5 +25,5 @@ RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=@system-service @chown
SystemCallFilter=~@privileged @resources @obsolete