From e9fab9587288b82ce8a1a9b8f07326f41b155935 Mon Sep 17 00:00:00 2001
From: iBug <git@ibugone.com>
Date: Tue, 22 Sep 2026 22:06:55 +0800
Subject: [PATCH] Add back SystemCallFilter=@chown (#907)

Otherwise lumberjack will fail to rotate log files

Ref: https://github.com/natefinch/lumberjack/pull/43/changes#diff-7a80b3353ee34c4b79751e1e47e5010af54e82f393aa112770a4d1a731e70ba2R480
---
 gost.service | 1 +
 1 file changed, 1 insertion(+)

diff --git a/gost.service b/gost.service
index c029b15..fa550b4 100644
--- a/gost.service
+++ b/gost.service
@@ -34,6 +34,7 @@ MemoryDenyWriteExecute=yes
 NoNewPrivileges=yes
 
 SystemCallFilter=~@privileged @mount @debug @cpu-emulation @obsolete
+SystemCallFilter=@chown
 SystemCallErrorNumber=EPERM
 SystemCallArchitectures=native
 RestrictNamespaces=yes