allow permissions openat mkdir

since required in Qubes Debian templates
This commit is contained in:
Patrick Schleizer 2019-07-01 03:07:14 -04:00
parent f26ad14d4c
commit 3c176ce158
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -21,7 +21,7 @@ NoNewPrivileges=true
RestrictRealtime=true
SystemCallArchitectures=native
RestrictNamespaces=true
SystemCallFilter=mount munmap access read open close stat fstat lstat mmap mprotect brk rt_sigaction rt_sigprocmask execve readlink getrlimit getuid getgid geteuid getegid statfs prctl arch_prctl set_tid_address newfstatat set_robust_list
SystemCallFilter=mount munmap access read open close stat fstat lstat mmap mprotect brk rt_sigaction rt_sigprocmask execve readlink getrlimit getuid getgid geteuid getegid statfs prctl arch_prctl set_tid_address newfstatat set_robust_list openat mkdir
[Install]
WantedBy=multi-user.target