From: Benny Baumann <BenBE1987@gmx.net>
Date: Wed, 8 Feb 2017 09:20:17 +0000 (+0100)
Subject: Merge "Temporarily disable SystemCallFilter"
X-Git-Url: https://code.wpia.club/?p=gigi.git;a=commitdiff_plain;h=670f26bd938db4c3e67fbe1e5a88cb56c792a27a;hp=ef4e1fb737eabb4d9816f63d19453dcc88b25662

Merge "Temporarily disable SystemCallFilter"
---

diff --git a/debian/cacert-gigi-testing.install b/debian/cacert-gigi-testing.install
index c78a9de8..c9cf96ad 100644
--- a/debian/cacert-gigi-testing.install
+++ b/debian/cacert-gigi-testing.install
@@ -1,5 +1,6 @@
 debian/gigi-proxy.service /lib/systemd/system
 debian/gigi-proxy.service.d/SystemCallFilter.conf /lib/systemd/system/gigi-proxy.service.d
+debian/gigi-proxy.service.d/Z-Disable-SystemCallFilter.conf /lib/systemd/system/gigi-proxy.service.d
 debian/gigi-proxy.socket /lib/systemd/system
 debian/gigi-standalone.service /lib/systemd/system
 debian/gigi-simple-signer.service /lib/systemd/system
diff --git a/debian/cacert-gigi.install b/debian/cacert-gigi.install
index c78a9de8..c9cf96ad 100644
--- a/debian/cacert-gigi.install
+++ b/debian/cacert-gigi.install
@@ -1,5 +1,6 @@
 debian/gigi-proxy.service /lib/systemd/system
 debian/gigi-proxy.service.d/SystemCallFilter.conf /lib/systemd/system/gigi-proxy.service.d
+debian/gigi-proxy.service.d/Z-Disable-SystemCallFilter.conf /lib/systemd/system/gigi-proxy.service.d
 debian/gigi-proxy.socket /lib/systemd/system
 debian/gigi-standalone.service /lib/systemd/system
 debian/gigi-simple-signer.service /lib/systemd/system
diff --git a/debian/gigi-proxy.service.d/Z-Disable-SystemCallFilter.conf b/debian/gigi-proxy.service.d/Z-Disable-SystemCallFilter.conf
new file mode 100644
index 00000000..d0a49a21
--- /dev/null
+++ b/debian/gigi-proxy.service.d/Z-Disable-SystemCallFilter.conf
@@ -0,0 +1,3 @@
+[Service]
+# SystemCallFilter seems to be broken in some setups in Debian Stretch's systemd 232-r14
+SystemCallFilter=