From: Yurii Izorkin <izorkin@elven.pw>
Date: Tue, 27 Apr 2021 18:34:53 +0000 (+0300)
Subject: templates/systemd/mastodon: optimize SystemCallFilters (#16127)
X-Git-Url: https://git.xn--scling-oua.cat.family/?a=commitdiff_plain;h=7da104eb11d3df12f89489a7d728b8b5df8425a8;p=mastodon.git

templates/systemd/mastodon: optimize SystemCallFilters (#16127)
---

diff --git a/dist/mastodon-sidekiq.service b/dist/mastodon-sidekiq.service
index e171475b5..9dd21b8a0 100644
--- a/dist/mastodon-sidekiq.service
+++ b/dist/mastodon-sidekiq.service
@@ -38,7 +38,7 @@ PrivateMounts=true
 ProtectClock=true
 # System Call Filtering
 SystemCallArchitectures=native
-SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
+SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap
 
 [Install]
 WantedBy=multi-user.target
diff --git a/dist/mastodon-web.service b/dist/mastodon-web.service
index fd9e28770..c106a4860 100644
--- a/dist/mastodon-web.service
+++ b/dist/mastodon-web.service
@@ -38,7 +38,7 @@ PrivateMounts=true
 ProtectClock=true
 # System Call Filtering
 SystemCallArchitectures=native
-SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap
+SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @resources @setuid @swap
 
 [Install]
 WantedBy=multi-user.target