systemd: remove RestrictNamespaces from service file

Wireplumber loads the libcamera nodes into the pipewire server.
We need to remove the RestrictNamespaces option from the service file
to allow libcamera to load sandboxed IPA modules.
This commit is contained in:
Wim Taymans 2025-09-17 10:21:10 +02:00
parent e6bcd7b611
commit 707bd256b9
2 changed files with 0 additions and 2 deletions

View file

@ -18,7 +18,6 @@ Requires=pipewire.socket
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
RestrictNamespaces=yes
SystemCallArchitectures=native
SystemCallFilter=@system-service
Type=simple

View file

@ -20,7 +20,6 @@ ConditionUser=!root
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
RestrictNamespaces=yes
SystemCallArchitectures=native
SystemCallFilter=@system-service mincore
Type=simple