Merge pull request #33 from Dunedan/enable-profanity-monitoring

Add changes for profanity checking
0ad · Oct 23, 2024 · ed155f3 · ed155f3
2 parents bdae5d0 + 71ffd55
commit ed155f3
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 16 deletions.
diff --git a/config-lobby-vagrant.yml b/config-lobby-vagrant.yml
@@ -59,7 +59,8 @@ bots: [
       "rooms": ["arena"],
       "command_room": "moderation",
       "no_verify": true,
-      "verbosity": 3
+      "verbosity": 3,
+      "enable_profanity_monitoring": true
     }
   },
 ]

diff --git a/roles/lobby_bots/templates/echelon-systemd-service.j2 b/roles/lobby_bots/templates/echelon-systemd-service.j2
@@ -27,11 +27,11 @@ ProtectKernelTunables=true
 ProtectSystem=full
 SystemCallArchitectures=native
 SystemCallFilter=access arch_prctl brk close connect epoll_create1 epoll_ctl epoll_wait fchmod
-SystemCallFilter=fcntl fdatasync futex getcwd getdents64 geteuid getpeername getpid getrandom
-SystemCallFilter=getsockname getsockopt gettid ioctl lseek mmap mprotect mremap munmap newfstatat
-SystemCallFilter=openat pread64 prlimit64 pwrite64 read readlink recvfrom rseq rt_sigaction sendto
-SystemCallFilter=set_robust_list setsockopt set_tid_address socket socketpair sysinfo uname unlink
-SystemCallFilter=write
+SystemCallFilter=fcntl fdatasync fstat futex getcwd getdents64 geteuid getpeername getpid getrandom
+SystemCallFilter=getsockname getsockopt gettid ioctl lseek mkdir mmap mprotect mremap munmap
+SystemCallFilter=newfstatat openat pread64 prlimit64 pwrite64 read readlink recvfrom rseq
+SystemCallFilter=rt_sigaction sendto set_robust_list setsockopt set_tid_address socket socketpair
+SystemCallFilter=sysinfo uname unlink write
 
 [Install]
 WantedBy=multi-user.target
diff --git a/roles/lobby_bots/templates/moderation-systemd-service.j2 b/roles/lobby_bots/templates/moderation-systemd-service.j2
@@ -27,11 +27,11 @@ ProtectKernelTunables=true
 ProtectSystem=full
 SystemCallArchitectures=native
 SystemCallFilter=access arch_prctl brk close connect epoll_create1 epoll_ctl epoll_wait fchmod
-SystemCallFilter=fcntl fdatasync futex getcwd getdents64 geteuid getpeername getpid getrandom
-SystemCallFilter=getsockname getsockopt gettid ioctl lseek mmap mprotect mremap munmap newfstatat
-SystemCallFilter=openat pread64 prlimit64 pwrite64 read readlink recvfrom rseq rt_sigaction sendto
-SystemCallFilter=set_robust_list setsockopt set_tid_address socket socketpair sysinfo uname unlink
-SystemCallFilter=write
+SystemCallFilter=fcntl fdatasync fstat futex getcwd getdents64 geteuid getpeername getpid getrandom
+SystemCallFilter=getsockname getsockopt gettid ioctl lseek mkdir mmap mprotect mremap munmap
+SystemCallFilter=newfstatat openat pread64 prlimit64 pwrite64 read readlink recvfrom rseq
+SystemCallFilter=rt_sigaction sendto set_robust_list setsockopt set_tid_address socket socketpair
+SystemCallFilter=sysinfo uname unlink write
 
 [Install]
 WantedBy=multi-user.target
diff --git a/roles/lobby_bots/templates/xpartamupp-systemd-service.j2 b/roles/lobby_bots/templates/xpartamupp-systemd-service.j2
@@ -26,11 +26,11 @@ ProtectKernelTunables=true
 ProtectSystem=full
 SystemCallArchitectures=native
 SystemCallFilter=access arch_prctl brk close connect epoll_create1 epoll_ctl epoll_wait fchmod
-SystemCallFilter=fcntl fdatasync futex getcwd getdents64 geteuid getpeername getpid getrandom
-SystemCallFilter=getsockname getsockopt gettid ioctl lseek mmap mprotect mremap munmap newfstatat
-SystemCallFilter=openat pread64 prlimit64 pwrite64 read readlink recvfrom rseq rt_sigaction sendto
-SystemCallFilter=set_robust_list setsockopt set_tid_address socket socketpair sysinfo uname unlink
-SystemCallFilter=write
+SystemCallFilter=fcntl fdatasync fstat futex getcwd getdents64 geteuid getpeername getpid getrandom
+SystemCallFilter=getsockname getsockopt gettid ioctl lseek mkdir mmap mprotect mremap munmap
+SystemCallFilter=newfstatat openat pread64 prlimit64 pwrite64 read readlink recvfrom rseq
+SystemCallFilter=rt_sigaction sendto set_robust_list setsockopt set_tid_address socket socketpair
+SystemCallFilter=sysinfo uname unlink write
 
 [Install]
 WantedBy=multi-user.target