diff --git a/etc/systemd/system/unbound.service.d/override-chroot.conf b/etc/systemd/system/unbound.service.d/override-chroot.conf index 2c50696..fd40093 100644 --- a/etc/systemd/system/unbound.service.d/override-chroot.conf +++ b/etc/systemd/system/unbound.service.d/override-chroot.conf @@ -9,7 +9,7 @@ ProtectClock=true ProtectControlGroups=true ProtectKernelLogs=true ProtectKernelModules=true -# This breaks using socket options like 'so-rcvbuf'. Explicitly disable for visibility. +# This breaks using socket options like 'so-rcvbuf'. ProtectKernelTunables=true ProtectProc=invisible # ProtectSystem with strict does not work - need further testing.