fix(authz): allow registered AI discovery updates

This commit is contained in:
冰朔 2026-08-06 12:43:34 +08:00
commit 91e7a17032
2 changed files with 12 additions and 1 deletions

View file

@ -15,7 +15,7 @@ NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/guanghu/architecture-provision /opt/guanghu/architecture-releases /etc/systemd/system
ReadWritePaths=/var/lib/guanghu/architecture-provision /opt/guanghu/architecture-releases /opt/guanghu/ai-discovery /etc/systemd/system
RuntimeDirectory=guanghu-architecture-provision
RuntimeDirectoryMode=0755
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6