Add process_mrelease to allowed system calls

zickgraf · rfjakob · commit c171b72ba217 · 2024-04-23T14:34:36.000+02:00
required since 2e00404 Without this, earlyoom seems to work but actually is killed with signal SIGSYS whenever an OOM situation occurs. It is immediately restarted by systemd, which is why this problem might go unnoticed.
diff --git a/earlyoom.service.in b/earlyoom.service.in
@@ -44,7 +44,7 @@ IPAddressDeny=any
 RestrictAddressFamilies=AF_UNIX
 
 SystemCallArchitectures=native
-SystemCallFilter=@system-service
+SystemCallFilter=@system-service process_mrelease
 SystemCallFilter=~@resources @privileged
 
 [Install]
