Allow the setrlimit syscall - #1961 (#2333)

This appears to be used by newer go versions and navidrome fails to
start unless it's allowed.

Signed-off-by: Jeff Henson <jeff@henson.io>
This commit is contained in:
Jeff Henson
2023-04-27 19:30:43 -06:00
committed by GitHub
parent c12510d6e2
commit 6d3d005fca
+1
View File
@@ -38,6 +38,7 @@ RestrictNamespaces=yes
RestrictRealtime=yes RestrictRealtime=yes
SystemCallFilter=@system-service SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources SystemCallFilter=~@privileged @resources
SystemCallFilter=setrlimit
SystemCallArchitectures=native SystemCallArchitectures=native
UMask=0066 UMask=0066