mirror of https://gitee.com/openkylin/systemd.git
udev: drop SystemCallArchitectures=native from systemd-udevd.service
We can't really control what helper programs are run from other udev rules. E.g. running i386 binaries under amd64 is a valid use case and should not trigger a SIGSYS failure. Closes: #869719 Gbp-Pq: Topic debian Gbp-Pq: Name udev-drop-SystemCallArchitectures-native-from-systemd-ude.patch
This commit is contained in:
parent
f34c25b710
commit
a98738b674
|
@ -38,7 +38,6 @@ RestrictRealtime=yes
|
|||
RestrictSUIDSGID=yes
|
||||
SystemCallFilter=@system-service @module @raw-io bpf
|
||||
SystemCallErrorNumber=EPERM
|
||||
SystemCallArchitectures=native
|
||||
LockPersonality=yes
|
||||
IPAddressDeny=any
|
||||
{{SERVICE_WATCHDOG}}
|
||||
|
|
Loading…
Reference in New Issue