Add back SystemCallFilter=@chown (#907)

Otherwise lumberjack will fail to rotate log files

Ref: https://github.com/natefinch/lumberjack/pull/43/changes#diff-7a80b3353ee34c4b79751e1e47e5010af54e82f393aa112770a4d1a731e70ba2R480
This commit is contained in:
iBug
2026-09-22 22:06:55 +08:00
committed by GitHub
parent 97bb57230c
commit 6ea0a0c215
+1
View File
@@ -34,6 +34,7 @@ MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
SystemCallFilter=~@privileged @mount @debug @cpu-emulation @obsolete
SystemCallFilter=@chown
SystemCallErrorNumber=EPERM
SystemCallArchitectures=native
RestrictNamespaces=yes