units: make use of @reboot and @swap in our long-running service SystemCallFilter...

[thirdparty/systemd.git] / units / systemd-importd.service.in

diff --git a/units/systemd-importd.service.in b/units/systemd-importd.service.in
index de2431739ff85bdf89ec17977805b7244e11d396..75585d5dbcc4a21b74f8abaabe47d559a6d7f9e6 100644 (file)
--- a/units/systemd-importd.service.in
+++ b/units/systemd-importd.service.in
@@ -21,5 +21,5 @@ MemoryDenyWriteExecute=yes
 RestrictRealtime=yes
 RestrictNamespaces=net
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @obsolete @raw-io
+SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @obsolete @raw-io @reboot @swap
 SystemCallArchitectures=native