From f37f038af62542d7616a1f27b89c54ea3a37bfcb Mon Sep 17 00:00:00 2001 From: Dmitry Konishchev Date: Tue, 19 May 2026 09:25:20 +0300 Subject: [PATCH] Fix an invalid section in example for NFTSet `NFTSet` is supposed to be in `Service` instead of `Unit` section. The current example leads to `Unknown key 'NFTSet' in section [Unit], ignoring` in systemd logs. (cherry picked from commit 0614602dfa1a4af016f323ca0a8e40efd12c5b11) (cherry picked from commit 3681e5fb50f7d0ebebd6076b7e019249eb031199) --- man/systemd.resource-control.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/man/systemd.resource-control.xml b/man/systemd.resource-control.xml index cb6f6db4841..c1e0ced2d0d 100644 --- a/man/systemd.resource-control.xml +++ b/man/systemd.resource-control.xml @@ -1085,7 +1085,7 @@ RestrictNetworkInterfaces=~eth1 systemctl daemon-reload can be used to refill the sets. Example: - [Unit] + [Service] NFTSet=cgroup:inet:filter:my_service user:inet:filter:serviceuser Corresponding NFT rules: