
added 'ProtectClock' and made the seccomp filter a bit more restrictive have been running with these settings for a while with zero problems
added 'ProtectClock' and made the seccomp filter a bit more restrictive have been running with these settings for a while with zero problems