From c171b72ba217e923551bdde7e7f00ec5a0488b54 Mon Sep 17 00:00:00 2001 From: Fabian Zickgraf Date: Sun, 21 Apr 2024 11:39:54 +0200 Subject: [PATCH] Add process_mrelease to allowed system calls required since 2e004040deb5b30880d72740bd71095e326479de Without this, earlyoom seems to work but actually is killed with signal SIGSYS whenever an OOM situation occurs. It is immediately restarted by systemd, which is why this problem might go unnoticed. --- earlyoom.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/earlyoom.service.in b/earlyoom.service.in index 3404643..99dfcd4 100644 --- a/earlyoom.service.in +++ b/earlyoom.service.in @@ -44,7 +44,7 @@ IPAddressDeny=any RestrictAddressFamilies=AF_UNIX SystemCallArchitectures=native -SystemCallFilter=@system-service +SystemCallFilter=@system-service process_mrelease SystemCallFilter=~@resources @privileged [Install]