update nohang.service
This commit is contained in:
parent
f73ff046ac
commit
ec93956a89
@ -14,8 +14,8 @@ OOMScoreAdjust=-10
|
|||||||
RestrictRealtime=yes
|
RestrictRealtime=yes
|
||||||
MemoryDenyWriteExecute=yes
|
MemoryDenyWriteExecute=yes
|
||||||
ProtectKernelModules=true
|
ProtectKernelModules=true
|
||||||
SystemCallFilter=~@mount ~@clock ~@reboot ~@resources ~@setuid ~@swap
|
|
||||||
SystemCallArchitectures=native
|
SystemCallArchitectures=native
|
||||||
|
SystemCallFilter=~@mount
|
||||||
ReadOnlyPaths=/
|
ReadOnlyPaths=/
|
||||||
ReadWritePaths=/tmp /var /run /dev/shm
|
ReadWritePaths=/tmp /var /run /dev/shm
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user