From 7f396e5f66e91caf450890c34bc9e00b717aae86 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Wed, 8 Feb 2017 22:32:37 +0100 Subject: units: set SystemCallArchitectures=native on all our long-running services --- units/systemd-journald.service.in | 1 + 1 file changed, 1 insertion(+) (limited to 'units/systemd-journald.service.in') diff --git a/units/systemd-journald.service.in b/units/systemd-journald.service.in index 712ce55483..b2e7eeeda3 100644 --- a/units/systemd-journald.service.in +++ b/units/systemd-journald.service.in @@ -28,6 +28,7 @@ MemoryDenyWriteExecute=yes RestrictRealtime=yes RestrictAddressFamilies=AF_UNIX AF_NETLINK SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io +SystemCallArchitectures=native # Increase the default a bit in order to allow many simultaneous # services being run since we keep one fd open per service. Also, when -- cgit v1.2.1