Skip to content

Commit

Permalink
MAINT: Fix AF_LINK warnings through systemd
Browse files Browse the repository at this point in the history
cd068fe added `RestrictAddressFamilies=~AF_PACKET AF_NETLINK`

which was sourced from https://github.com/archlinux/svntogit-community/blob/ba167269f8336659313d589dea65642b4eae4f85/trunk/murmur.service
where it was added in archlinux/svntogit-community@d609d47
described as "hardening" without further reasoning or information.

The disallow of `AF_LINK` leads to continuous spamming of `Address family not supported by protocol` in the systlog. Dropping this resolves that.

Resolves #6180
  • Loading branch information
Kissaki authored Jan 12, 2025
1 parent 29ca4f0 commit ba3a32d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion auxiliary_files/config_files/mumble-server.service.in
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectSystem=full
RestrictAddressFamilies=~AF_PACKET AF_NETLINK
RestrictAddressFamilies=~AF_PACKET
RestrictNamespaces=yes
RestrictSUIDSGID=yes
RestrictRealtime=yes
Expand Down

0 comments on commit ba3a32d

Please sign in to comment.