add missing syscalls (paritytech#7521) (paritytech#7525)

Co-authored-by: tugy <[email protected]>
grindytech · Jul 20, 2023 · ff1c1d9 · ff1c1d9
1 parent 1ed6e2e
commit ff1c1d9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/scripts/packaging/polkadot.service b/scripts/packaging/polkadot.service
@@ -29,6 +29,7 @@ RestrictNamespaces=true
 RestrictSUIDSGID=true
 SystemCallArchitectures=native
 SystemCallFilter=@system-service
+SystemCallFilter=landlock_add_rule landlock_create_ruleset landlock_restrict_self seccomp
 SystemCallFilter=~@clock @module @mount @reboot @swap @privileged
 UMask=0027