From 5b7f822f176e2358aa51460cd8dc3fee259200f2 Mon Sep 17 00:00:00 2001
From: Niko <niko@niko.lgbt>
Date: Tue, 3 Sep 2024 20:08:52 +0000
Subject: [PATCH] Fix broken sandboxing resulting in SIGABRT (#136)

---
 systemd/wireproxy.service | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/systemd/wireproxy.service b/systemd/wireproxy.service
index 832f813..0ecc551 100644
--- a/systemd/wireproxy.service
+++ b/systemd/wireproxy.service
@@ -40,7 +40,7 @@ RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK
 RestrictNamespaces=true
 RestrictRealtime=true
 SystemCallArchitectures=native
-SystemCallFilter=@system-service
+SystemCallFilter=@system-service @sandbox
 
 [Install]
 WantedBy=multi-user.target