systemd: remove RestrictNamespaces from service file

Wireplumber loads the libcamera nodes into the pipewire server.
We need to remove the RestrictNamespaces option from the service file
to allow libcamera to load sandboxed IPA modules.
This commit is contained in:
Wim Taymans 2025-09-17 10:21:10 +02:00
parent 5212649ee1
commit 8f35e18d18
2 changed files with 0 additions and 2 deletions

View file

@ -18,7 +18,6 @@ Requires=pipewire.socket
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
RestrictNamespaces=yes
SystemCallArchitectures=native
SystemCallFilter=@system-service
Type=simple

View file

@ -20,7 +20,6 @@ ConditionUser=!root
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
RestrictNamespaces=yes
SystemCallArchitectures=native
SystemCallFilter=@system-service mincore
Type=simple