Add syscall filtering to xrdp systemd unit

2023-05-22 15:53:40 -04:00
parent a2798fe9e9
commit 9bf78e4a80
1 changed files with 2 additions and 0 deletions
@@ -9,6 +9,8 @@ Type=exec
 EnvironmentFile=-@sysconfdir@/sysconfig/xrdp
 EnvironmentFile=-@sysconfdir@/default/xrdp
 ExecStart=@sbindir@/xrdp $XRDP_OPTIONS --nodaemon
+SystemCallArchitectures=native
+SystemCallFilter=@basic-io @file-system @io-event @ipc @network-io @process @signal ioctl madvise sysinfo uname

 [Install]
 WantedBy=multi-user.target