How strange. If I take a service and set SystemCallFilter=@basic-io SystemCallLog=~@basic-io and then restart it, I get a bunch of audit SECCOMP log messa

How strange. If I take a service and set SystemCallFilter=@basic-io SystemCallLog=~@basic-io and then restart it, I get a bunch of audit SECCOMP log messages (and the service fails to start): audit[1185972]: SECCOMP auid=4294967295 uid=63946 gid=63946 ses=4294967295 subj==unconfined pid=1185972 comm="(t-online)" exe="/usr/lib/systemd/systemd" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f5c632f66c7 code=0x7ffc0000 This is debian bullseye and systemd 247. I wonder if your audit logs are going somewhere else?