···

       
1822
       
 
       
        RestrictRealtime = true;

     

       
1823
       
 
       
        RestrictSUIDSGID = true;

     

       
1824
       
 
       
        SystemCallArchitectures = "native";

     

       
1825
       
-
       
        SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];

     

       
1826
       
 
       
      };

     

       
1827
       
 
       
    };

     

       
1828
       
 
       
    # prometheus-config-reload will activate after prometheus. However, what we

     

···

       
1822
       
 
       
        RestrictRealtime = true;

     

       
1823
       
 
       
        RestrictSUIDSGID = true;

     

       
1824
       
 
       
        SystemCallArchitectures = "native";

     

       
1825
       
+
       
        SystemCallFilter = [ "@system-service" "~@privileged" ];

     

       
1826
       
 
       
      };

     

       
1827
       
 
       
    };

     

       
1828
       
 
       
    # prometheus-config-reload will activate after prometheus. However, what we