diff --git a/src/systemd/system/wireplumber.service.in b/src/systemd/system/wireplumber.service.in index 54696d6a..460364c7 100644 --- a/src/systemd/system/wireplumber.service.in +++ b/src/systemd/system/wireplumber.service.in @@ -9,7 +9,7 @@ LockPersonality=yes MemoryDenyWriteExecute=yes NoNewPrivileges=yes SystemCallArchitectures=native -SystemCallFilter=@system-service +SystemCallFilter=@system-service mincore Type=simple AmbientCapabilities=CAP_SYS_NICE ExecStart=@WP_BINARY@ -p main-systemwide diff --git a/src/systemd/system/wireplumber@.service.in b/src/systemd/system/wireplumber@.service.in index 0766d4e0..94024959 100644 --- a/src/systemd/system/wireplumber@.service.in +++ b/src/systemd/system/wireplumber@.service.in @@ -14,7 +14,7 @@ LockPersonality=yes MemoryDenyWriteExecute=yes NoNewPrivileges=yes SystemCallArchitectures=native -SystemCallFilter=@system-service +SystemCallFilter=@system-service mincore Type=simple AmbientCapabilities=CAP_SYS_NICE ExecStart=@WP_BINARY@ -p %i diff --git a/src/systemd/user/wireplumber.service.in b/src/systemd/user/wireplumber.service.in index cb16e82a..64ab2cd5 100644 --- a/src/systemd/user/wireplumber.service.in +++ b/src/systemd/user/wireplumber.service.in @@ -9,7 +9,7 @@ LockPersonality=yes MemoryDenyWriteExecute=yes NoNewPrivileges=yes SystemCallArchitectures=native -SystemCallFilter=@system-service +SystemCallFilter=@system-service mincore Type=simple ExecStart=@WP_BINARY@ Restart=on-failure diff --git a/src/systemd/user/wireplumber@.service.in b/src/systemd/user/wireplumber@.service.in index 5c1096fc..df66cfc4 100644 --- a/src/systemd/user/wireplumber@.service.in +++ b/src/systemd/user/wireplumber@.service.in @@ -14,7 +14,7 @@ LockPersonality=yes MemoryDenyWriteExecute=yes NoNewPrivileges=yes SystemCallArchitectures=native -SystemCallFilter=@system-service +SystemCallFilter=@system-service mincore Type=simple ExecStart=@WP_BINARY@ -p %i Restart=on-failure