From 3b7e4479a10bdf07727aaee16bc54bbc401571d3 Mon Sep 17 00:00:00 2001 From: JustArchi Date: Wed, 16 Nov 2022 13:56:41 +0100 Subject: [PATCH] Closes #2739 --- .../overlay/variant-base/linux/ArchiSteamFarm@.service | 6 +++--- .../variant-specific/generic-netf/ArchiSteamFarm@.service | 6 +++--- .../variant-specific/generic/ArchiSteamFarm@.service | 6 +++--- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/ArchiSteamFarm/overlay/variant-base/linux/ArchiSteamFarm@.service b/ArchiSteamFarm/overlay/variant-base/linux/ArchiSteamFarm@.service index 60dba6878..9ecb59bb5 100644 --- a/ArchiSteamFarm/overlay/variant-base/linux/ArchiSteamFarm@.service +++ b/ArchiSteamFarm/overlay/variant-base/linux/ArchiSteamFarm@.service @@ -34,14 +34,14 @@ RestrictNamespaces=yes RestrictRealtime=yes RestrictSUIDSGID=yes SystemCallArchitectures=native -SystemCallFilter=@system-service -SystemCallFilter=~@privileged UMask=0077 -# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666 +# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666 and https://github.com/JustArchiNET/ArchiSteamFarm/issues/2739 # Since we don't want to enforce OS upgrade for everybody just yet, it's commented out for now # We'll likely enforce it when .NET switches to Debian 11+ requirement #SecureBits=noroot-locked +#SystemCallFilter=@system-service +#SystemCallFilter=~@privileged [Unit] After=network.target diff --git a/ArchiSteamFarm/overlay/variant-specific/generic-netf/ArchiSteamFarm@.service b/ArchiSteamFarm/overlay/variant-specific/generic-netf/ArchiSteamFarm@.service index ddd74a12f..b22462a4e 100644 --- a/ArchiSteamFarm/overlay/variant-specific/generic-netf/ArchiSteamFarm@.service +++ b/ArchiSteamFarm/overlay/variant-specific/generic-netf/ArchiSteamFarm@.service @@ -34,14 +34,14 @@ RestrictNamespaces=yes RestrictRealtime=yes RestrictSUIDSGID=yes SystemCallArchitectures=native -SystemCallFilter=@system-service -SystemCallFilter=~@privileged UMask=0077 -# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666 +# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666 and https://github.com/JustArchiNET/ArchiSteamFarm/issues/2739 # Since we don't want to enforce OS upgrade for everybody just yet, it's commented out for now # We'll likely enforce it when .NET switches to Debian 11+ requirement #SecureBits=noroot-locked +#SystemCallFilter=@system-service +#SystemCallFilter=~@privileged [Unit] After=network.target diff --git a/ArchiSteamFarm/overlay/variant-specific/generic/ArchiSteamFarm@.service b/ArchiSteamFarm/overlay/variant-specific/generic/ArchiSteamFarm@.service index ea59e3b6e..b7b610419 100644 --- a/ArchiSteamFarm/overlay/variant-specific/generic/ArchiSteamFarm@.service +++ b/ArchiSteamFarm/overlay/variant-specific/generic/ArchiSteamFarm@.service @@ -34,14 +34,14 @@ RestrictNamespaces=yes RestrictRealtime=yes RestrictSUIDSGID=yes SystemCallArchitectures=native -SystemCallFilter=@system-service -SystemCallFilter=~@privileged UMask=0077 -# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666 +# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666 and https://github.com/JustArchiNET/ArchiSteamFarm/issues/2739 # Since we don't want to enforce OS upgrade for everybody just yet, it's commented out for now # We'll likely enforce it when .NET switches to Debian 11+ requirement #SecureBits=noroot-locked +#SystemCallFilter=@system-service +#SystemCallFilter=~@privileged [Unit] After=network.target