diff --git a/contrib/init/dashd.service b/contrib/init/dashd.service index 223c05a875..60140bdf7a 100644 --- a/contrib/init/dashd.service +++ b/contrib/init/dashd.service @@ -78,5 +78,8 @@ PrivateDevices=true # Deny the creation of writable and executable memory mappings. MemoryDenyWriteExecute=true +# Restrict ABIs to help ensure MemoryDenyWriteExecute is enforced +SystemCallArchitectures=native + [Install] WantedBy=multi-user.target