@@ -405,8 +405,8 @@ in
405405 StateDirectory = "rspamd";
406406 StateDirectoryMode = "0700";
407407
408− AmbientCapabilities = "";
409− CapabilityBoundingSet = "";
408+ AmbientCapabilities = [];
409+ CapabilityBoundingSet = [];
410410 DevicePolicy = "closed";
411411 LockPersonality = true;
412412 NoNewPrivileges = true;
@@ -423,7 +423,7 @@ in
423423 ProtectKernelTunables = true;
424424 ProtectSystem = "strict";
425425 RemoveIPC = true;
426− RestrictAddressFamilies = "AF_INET AF_INET6 AF_UNIX";
426+ RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ];
427427 RestrictNamespaces = true;
428428 RestrictRealtime = true;
429429 RestrictSUIDSGID = true;