mirror of
https://github.com/redlib-org/redlib.git
synced 2024-12-06 19:27:17 +01:00
Fix systemd service (#275)
Release Build / Rust project - latest (aarch64-unknown-linux-musl) (push) Waiting to run
Release Build / Rust project - latest (armv7-unknown-linux-musleabihf) (push) Waiting to run
Release Build / Rust project - latest (x86_64-unknown-linux-musl) (push) Waiting to run
Rust Build & Publish / build (push) Waiting to run
Pull Request / cargo test (push) Waiting to run
Pull Request / cargo fmt --all -- --check (push) Waiting to run
Pull Request / cargo clippy -- -D warnings (push) Waiting to run
Release Build / Rust project - latest (aarch64-unknown-linux-musl) (push) Waiting to run
Release Build / Rust project - latest (armv7-unknown-linux-musleabihf) (push) Waiting to run
Release Build / Rust project - latest (x86_64-unknown-linux-musl) (push) Waiting to run
Rust Build & Publish / build (push) Waiting to run
Pull Request / cargo test (push) Waiting to run
Pull Request / cargo fmt --all -- --check (push) Waiting to run
Pull Request / cargo clippy -- -D warnings (push) Waiting to run
This format is not recognized by systemd. As shown in the following log: /etc/systemd/system/redlib.service:33: System call ~@privileged is not known, ignoring. /etc/systemd/system/redlib.service:33: System call ~@resources is not known, ignoring.
This commit is contained in:
@@ -30,7 +30,8 @@ RestrictNamespaces=yes
|
||||
RestrictRealtime=yes
|
||||
RestrictSUIDSGID=yes
|
||||
SystemCallArchitectures=native
|
||||
SystemCallFilter=@system-service ~@privileged ~@resources
|
||||
SystemCallFilter=@system-service
|
||||
SystemCallFilter=~@privileged @resources
|
||||
UMask=0077
|
||||
|
||||
[Install]
|
||||
|
||||
Reference in New Issue
Block a user