| Message ID | 20211130123822.54xbnorwntnuttol@gmail.com |
|---|---|
| State | New |
| Headers | show |
| Series | [1/2] paccache.service.in: Add @system-service to SystemCallFilter | expand |
On Tue, Nov 30, 2021 at 01:38:22PM +0100, Frederik “Freso” S. Olesen via pacman-contrib wrote: > The SystemCallFilter group @system-service includes some calls > that are necessary for the service unit to run, that are not > included in @file-system. > > Signed-off-by: Frederik “Freso” S. Olesen <freso.dk@gmail.com> hello. you can open mr at https://gitlab.archlinux.org/pacman/pacman-contrib -- Sincerely, Alexander | Trusted User
On Tue, Nov 30, 2021 at 05:02:52PM +0300, Alexander Epaneshnikov wrote: > On Tue, Nov 30, 2021 at 01:38:22PM +0100, Frederik “Freso” S. Olesen via pacman-contrib wrote: > > The SystemCallFilter group @system-service includes some calls > > that are necessary for the service unit to run, that are not > > included in @file-system. > > > > Signed-off-by: Frederik “Freso” S. Olesen <freso.dk@gmail.com> > > hello. you can open mr at https://gitlab.archlinux.org/pacman/pacman-contrib FYI I did that. https://gitlab.archlinux.org/pacman/pacman-contrib/-/merge_requests/3
On Tue, Dec 07, 2021 at 01:14:09PM +0300, Alexander Epaneshnikov wrote: > On Tue, Nov 30, 2021 at 05:02:52PM +0300, Alexander Epaneshnikov wrote: > > On Tue, Nov 30, 2021 at 01:38:22PM +0100, Frederik “Freso” S. Olesen via pacman-contrib wrote: > > > The SystemCallFilter group @system-service includes some calls > > > that are necessary for the service unit to run, that are not > > > included in @file-system. > > > > > > Signed-off-by: Frederik “Freso” S. Olesen <freso.dk@gmail.com> > > > > hello. you can open mr at https://gitlab.archlinux.org/pacman/pacman-contrib Nice! I hadn’t realised that gitlab.AL had been opened to the public now. Last time I checked, only devs and TUs and maybe a few others had access. :) > FYI I did that. https://gitlab.archlinux.org/pacman/pacman-contrib/-/merge_requests/3 Yeah, I just today managed to get access to it. (It wasn’t clear which e-mail it wanted me to verify, so I had to dig through a bunch of addresses before finding the verification mail.) Anyway, as you said, you made the PR now, so thanks for that. At least I have access now for future PRs. :p
diff --git a/src/paccache.service.in b/src/paccache.service.in index 0a280b3..a821daf 100644 --- a/src/paccache.service.in +++ b/src/paccache.service.in @@ -36,5 +36,5 @@ RestrictRealtime=yes RestrictSUIDSGID=yes RemoveIPC=yes PrivateMounts=yes -SystemCallFilter=@file-system +SystemCallFilter=@system-service @file-system SystemCallArchitectures=native
The SystemCallFilter group @system-service includes some calls that are necessary for the service unit to run, that are not included in @file-system. Signed-off-by: Frederik “Freso” S. Olesen <freso.dk@gmail.com> --- src/paccache.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)