diff --git a/builtin/gc.c b/builtin/gc.c index b842349d86..00192ae5d3 100644 --- a/builtin/gc.c +++ b/builtin/gc.c @@ -2434,7 +2434,7 @@ static int systemd_timer_write_service_template(const char *exec_path) "LockPersonality=yes\n" "MemoryDenyWriteExecute=yes\n" "NoNewPrivileges=yes\n" - "RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6\n" + "RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_VSOCK\n" "RestrictNamespaces=yes\n" "RestrictRealtime=yes\n" "RestrictSUIDSGID=yes\n"