units: make use of @reboot and @swap in our long-running service SystemCallFilter...

[thirdparty/systemd.git] / units / systemd-networkd.service.m4.in

diff --git a/units/systemd-networkd.service.m4.in b/units/systemd-networkd.service.m4.in
index d33deb97b6361b3b8dfd6b5d92202301b51c5733..c3f153046a88c0575f5f68df4cdd58ddb1298d0a 100644 (file)
--- a/units/systemd-networkd.service.m4.in
+++ b/units/systemd-networkd.service.m4.in
@@ -35,7 +35,7 @@ ProtectKernelModules=yes
 MemoryDenyWriteExecute=yes
 RestrictRealtime=yes
 RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET
-SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io
+SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
 SystemCallArchitectures=native
 ReadWritePaths=/run/systemd