diff options
Diffstat (limited to 'shadow.service')
| -rw-r--r-- | shadow.service | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/shadow.service b/shadow.service index 951cdc3bd3b9..5edc878c7907 100644 --- a/shadow.service +++ b/shadow.service @@ -26,7 +26,7 @@ ProtectKernelModules=yes ProtectKernelTunables=yes ProtectProc=invisible ProtectSystem=strict -RestrictAddressFamilies=none +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 RestrictNamespaces=yes RestrictSUIDSGID=yes RestrictRealtime=yes |