Merge pull request #249939 from erdnaxe/galene-fix

          ProtectSystem = "strict";

          ReadWritePaths = cfg.recordingsDir;

          RemoveIPC = true;

          RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];

          RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_NETLINK" ];

          RestrictNamespaces = true;

          RestrictRealtime = true;

          RestrictSUIDSGID = true;