systemd/backport-unit-add-AF_ALG-to-systemd-networkd.service.patch
2023-12-06 16:52:45 +08:00

29 lines
999 B
Diff

From 1b3cccfdacc7b36d2a541d944a6268cacfe2fcf2 Mon Sep 17 00:00:00 2001
From: Yu Watanabe <watanabe.yu+github@gmail.com>
Date: Sun, 26 Jan 2020 21:24:09 +0900
Subject: [PATCH 1456/1760] unit: add AF_ALG to systemd-networkd.service
networkd uses khash, and khash requires AF_ALG.
Reference: https://github.com/systemd/systemd/commit/1b3cccfdacc7b36d2a541d944a6268cacfe2fcf2
Conflict: NA
---
units/systemd-networkd.service.in | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/units/systemd-networkd.service.in b/units/systemd-networkd.service.in
index 0193166..1b69677 100644
--- a/units/systemd-networkd.service.in
+++ b/units/systemd-networkd.service.in
@@ -33,7 +33,7 @@ ProtectKernelLogs=yes
ProtectSystem=strict
Restart=on-failure
RestartSec=0
-RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET
+RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET AF_ALG
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
--
1.8.3.1