From: Yu Watanabe <watanabe.yu+github@gmail.com>
Date: Sun, 26 Jan 2020 12:24:09 +0000 (+0900)
Subject: unit: add AF_ALG to systemd-networkd.service
X-Git-Tag: v245-rc1~72
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1b3cccfdacc7b36d2a541d944a6268cacfe2fcf2;p=thirdparty%2Fsystemd.git

unit: add AF_ALG to systemd-networkd.service

networkd uses khash, and khash requires AF_ALG.
---

diff --git a/units/systemd-networkd.service.in b/units/systemd-networkd.service.in
index 01931665a49..1b69677496d 100644
--- a/units/systemd-networkd.service.in
+++ b/units/systemd-networkd.service.in
@@ -33,7 +33,7 @@ ProtectKernelLogs=yes
 ProtectSystem=strict
 Restart=on-failure
 RestartSec=0
-RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET
+RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET AF_ALG
 RestrictNamespaces=yes
 RestrictRealtime=yes
 RestrictSUIDSGID=yes