From a0ef441eead8a547c26e1fe7eda6d416cea5f87d Mon Sep 17 00:00:00 2001
From: rrr-marble <rrr@marble.lan>
Date: Sat, 16 Oct 2021 00:33:36 +0300
Subject: [PATCH] add: verbose syscall filter list for compatibility

---
 myip.service | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/myip.service b/myip.service
index 332df3a..78e16c0 100644
--- a/myip.service
+++ b/myip.service
@@ -13,7 +13,8 @@ LockPersonality=true
 RestrictRealtime=true
 RestrictSUIDSGID=true
 RemoveIPC=true
-SystemCallFilter=@system-service
+SystemCallFilter=@network-io @basic-io @signal @file-system @process @io-event mprotect brk
+SystemCallFilter=~@mount
 ProtectSystem=strict
 ProtectHome=true
 RuntimeDirectory=myip