`/lib/systemd/system/haveged.service.d/30_security-misc.conf` `SystemCallFilter=getrandom` Otherwise haveged will exit with a core dump.