hashmap: always set key output argument of internal_hashmap_first_key_and_value()

[thirdparty/systemd.git] / units / systemd-importd.service.in

diff --git a/units/systemd-importd.service.in b/units/systemd-importd.service.in
index 8e93c2d5240ba1bb27c357129f5e0bab1aa4e187..20704a82324780d9f41ad9af8b1574caf901a7a5 100644 (file)
--- a/units/systemd-importd.service.in
+++ b/units/systemd-importd.service.in
@@ -23,6 +23,7 @@ MemoryDenyWriteExecute=yes
 RestrictRealtime=yes
 RestrictNamespaces=net
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @obsolete @raw-io @reboot @swap
+SystemCallFilter=@system-service @mount
+SystemCallErrorNumber=EPERM
 SystemCallArchitectures=native
 LockPersonality=yes