This appears to be used by newer go versions and navidrome fails to start unless it's allowed. Signed-off-by: Jeff Henson <jeff@henson.io>
This commit is contained in:
@@ -38,6 +38,7 @@ RestrictNamespaces=yes
|
|||||||
RestrictRealtime=yes
|
RestrictRealtime=yes
|
||||||
SystemCallFilter=@system-service
|
SystemCallFilter=@system-service
|
||||||
SystemCallFilter=~@privileged @resources
|
SystemCallFilter=~@privileged @resources
|
||||||
|
SystemCallFilter=setrlimit
|
||||||
SystemCallArchitectures=native
|
SystemCallArchitectures=native
|
||||||
UMask=0066
|
UMask=0066
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user