Add syscall filtering to xrdp systemd unit

neutrinolabs · May 23, 2023 · 67f5576 · 67f5576
1 parent 8535f8e
commit 67f5576
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/instfiles/xrdp.service.in b/instfiles/xrdp.service.in
@@ -9,6 +9,8 @@ Type=exec
 EnvironmentFile=-@sysconfdir@/sysconfig/xrdp
 EnvironmentFile=-@sysconfdir@/default/xrdp
 ExecStart=@sbindir@/xrdp $XRDP_OPTIONS --nodaemon
+SystemCallArchitectures=native
+SystemCallFilter=@basic-io @file-system @io-event @ipc @network-io @process @signal sysinfo uname
 
 [Install]
 WantedBy=multi-user.target