diff --git a/builtin/gc.c b/builtin/gc.c index 0de1c4dfafca91..97cb72af1d9088 100644 --- a/builtin/gc.c +++ b/builtin/gc.c @@ -2495,7 +2495,7 @@ static int systemd_timer_write_service_template(const char *exec_path) "LockPersonality=yes\n" "MemoryDenyWriteExecute=yes\n" "NoNewPrivileges=yes\n" - "RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6\n" + "RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_VSOCK\n" "RestrictNamespaces=yes\n" "RestrictRealtime=yes\n" "RestrictSUIDSGID=yes\n"