units: make use of @reboot and @swap in our long-running service SystemCallFilter...

[thirdparty/systemd.git] / units / systemd-localed.service.in

diff --git a/units/systemd-localed.service.in b/units/systemd-localed.service.in
index a41e30bfdf55e200ab52fdb20e12a899c70442ee..f76012a34c8b54b6847cb194b1bac4eb89bbada1 100644 (file)
--- a/units/systemd-localed.service.in
+++ b/units/systemd-localed.service.in
@@ -27,6 +27,6 @@ MemoryDenyWriteExecute=yes
 RestrictRealtime=yes
 RestrictNamespaces=yes
 RestrictAddressFamilies=AF_UNIX
-SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io
+SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
 SystemCallArchitectures=native
 ReadWritePaths=/etc