Fix segfault due to insufficient permissions

maximumadmin · Jun 13, 2021 · 9c6de0d · 9c6de0d
1 parent 8ac60c3
commit 9c6de0d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -152,7 +152,7 @@ See also https://fedoraproject.org/wiki/Changes/SwapOnZRAM#Benefit_to_Fedora
     -p MemoryDenyWriteExecute=yes \
     -p LockPersonality=yes \
     -p 'CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_MODULE' \
-    -p 'SystemCallFilter=@module @swap' \
+    -p 'SystemCallFilter=@module @swap @system-service' \
     -p SystemCallArchitectures=native \
     -p SystemCallErrorNumber=EPERM \
     -p 'DeviceAllow=block-* rw' \

diff --git a/extra/zramd.service b/extra/zramd.service
@@ -17,7 +17,7 @@ RestrictSUIDSGID=yes
 MemoryDenyWriteExecute=yes
 LockPersonality=yes
 CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_MODULE
-SystemCallFilter=@module @swap
+SystemCallFilter=@module @swap @system-service
 SystemCallArchitectures=native
 SystemCallErrorNumber=EPERM
 DeviceAllow=block-* rw