Add warning to the syscall filter in service file

LinkTed · Oct 4, 2022 · 6e97249 · 6e97249
1 parent 7362840
commit 6e97249
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/package/linux/doh-client.service b/package/linux/doh-client.service
@@ -47,7 +47,8 @@ SecureBits=no-cap-ambient-raise,no-cap-ambient-raise-locked
 
 
 # System Call Filtering
-##
+## syscall filter for the current Arch Linux kernel (remove it for other distros if it causes
+## problems)
 SystemCallFilter=access arch_prctl bind brk clone close connect epoll_create1 epoll_ctl epoll_wait
 SystemCallFilter=eventfd2 execve fcntl futex getrandom getsockopt ioctl mmap mprotect munmap
 SystemCallFilter=newfstatat openat poll prctl pread64 prlimit64 read recvfrom rt_sigaction