From 1b3cccfdacc7b36d2a541d944a6268cacfe2fcf2 Mon Sep 17 00:00:00 2001
From: Yu Watanabe <watanabe.yu+github@gmail.com>
Date: Sun, 26 Jan 2020 21:24:09 +0900
Subject: [PATCH] unit: add AF_ALG to systemd-networkd.service

networkd uses khash, and khash requires AF_ALG.
---
 units/systemd-networkd.service.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/units/systemd-networkd.service.in b/units/systemd-networkd.service.in
index 01931665a4..1b69677496 100644
--- a/units/systemd-networkd.service.in
+++ b/units/systemd-networkd.service.in
@@ -33,7 +33,7 @@ ProtectKernelLogs=yes
 ProtectSystem=strict
 Restart=on-failure
 RestartSec=0
-RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET
+RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET AF_ALG
 RestrictNamespaces=yes
 RestrictRealtime=yes
 RestrictSUIDSGID=yes