Merge pull request #2697 from iskunk/new-3

Add syscall filtering to xrdp systemd unit
This commit is contained in:
matt335672 2023-07-31 16:25:07 +01:00 committed by GitHub
commit 1d6997001e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -9,6 +9,8 @@ Type=exec
EnvironmentFile=-@sysconfdir@/sysconfig/xrdp
EnvironmentFile=-@sysconfdir@/default/xrdp
ExecStart=@sbindir@/xrdp $XRDP_OPTIONS --nodaemon
SystemCallArchitectures=native
SystemCallFilter=@basic-io @file-system @io-event @ipc @network-io @process @signal ioctl madvise sysinfo uname
[Install]
WantedBy=multi-user.target