From ba3a32d736cbd30146e11287a755f4b599d393c7 Mon Sep 17 00:00:00 2001 From: Jan Klass Date: Sun, 12 Jan 2025 15:08:15 +0100 Subject: [PATCH] MAINT: Fix AF_LINK warnings through systemd cd068fe3eec4713916257295626e2aebf6c6ed7f added `RestrictAddressFamilies=~AF_PACKET AF_NETLINK` which was sourced from https://github.com/archlinux/svntogit-community/blob/ba167269f8336659313d589dea65642b4eae4f85/trunk/murmur.service where it was added in https://github.com/archlinux/svntogit-community/commit/d609d479160961b69f16c65f011be9f59310e991 described as "hardening" without further reasoning or information. The disallow of `AF_LINK` leads to continuous spamming of `Address family not supported by protocol` in the systlog. Dropping this resolves that. Resolves #6180 --- auxiliary_files/config_files/mumble-server.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/auxiliary_files/config_files/mumble-server.service.in b/auxiliary_files/config_files/mumble-server.service.in index 852d1b61a60..afca13a84af 100644 --- a/auxiliary_files/config_files/mumble-server.service.in +++ b/auxiliary_files/config_files/mumble-server.service.in @@ -22,7 +22,7 @@ ProtectKernelLogs=yes ProtectKernelModules=yes ProtectKernelTunables=yes ProtectSystem=full -RestrictAddressFamilies=~AF_PACKET AF_NETLINK +RestrictAddressFamilies=~AF_PACKET RestrictNamespaces=yes RestrictSUIDSGID=yes RestrictRealtime=yes