update nohang.service

This commit is contained in:
Alexey Avramov 2019-10-02 01:27:37 +09:00
parent f73ff046ac
commit ec93956a89

View File

@ -14,8 +14,8 @@ OOMScoreAdjust=-10
RestrictRealtime=yes RestrictRealtime=yes
MemoryDenyWriteExecute=yes MemoryDenyWriteExecute=yes
ProtectKernelModules=true ProtectKernelModules=true
SystemCallFilter=~@mount ~@clock ~@reboot ~@resources ~@setuid ~@swap
SystemCallArchitectures=native SystemCallArchitectures=native
SystemCallFilter=~@mount
ReadOnlyPaths=/ ReadOnlyPaths=/
ReadWritePaths=/tmp /var /run /dev/shm ReadWritePaths=/tmp /var /run /dev/shm