From 0fc7c7db07dc940757251260191e7de065b0dc14 Mon Sep 17 00:00:00 2001 From: Kimiblock Moe Date: Thu, 2 May 2024 21:15:44 +0800 Subject: [PATCH] Update snotify.service --- snotify.service | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/snotify.service b/snotify.service index 2206012..f3ffb53 100644 --- a/snotify.service +++ b/snotify.service @@ -25,7 +25,7 @@ ProtectKernelLogs=yes ProtectControlGroups=yes RestrictNamespaces=yes LockPersonality=yes -MemoryDenyWriteExecute=yes +MemoryDenyWriteExecute=no RestrictRealtime=yes RestrictSUIDSGID=yes RemoveIPC=yes @@ -47,6 +47,7 @@ SystemCallFilter=~@obsolete #SystemCallFilter=~@resources #RestrictAddressFamilies=none RestrictAddressFamilies=AF_UNIX +IPAccounting=yes IPAddressAllow=localhost PrivateUsers=yes PrivateNetwork=yes