diff options
Diffstat (limited to 'src/grp-hostname/systemd-hostnamed/systemd-hostnamed.service.in')
| -rw-r--r-- | src/grp-hostname/systemd-hostnamed/systemd-hostnamed.service.in | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/grp-hostname/systemd-hostnamed/systemd-hostnamed.service.in b/src/grp-hostname/systemd-hostnamed/systemd-hostnamed.service.in index b7079e4a7c..0b03a589ea 100644 --- a/src/grp-hostname/systemd-hostnamed/systemd-hostnamed.service.in +++ b/src/grp-hostname/systemd-hostnamed/systemd-hostnamed.service.in @@ -20,3 +20,5 @@ PrivateDevices=yes PrivateNetwork=yes ProtectSystem=yes ProtectHome=yes +MemoryDenyWriteExecute=yes +SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io |