Allow the setrlimit syscall - #1961 (#2333)

This appears to be used by newer go versions and navidrome fails to
start unless it's allowed.

Signed-off-by: Jeff Henson <jeff@henson.io>
This commit is contained in:
Jeff Henson 2023-04-27 19:30:43 -06:00 committed by Joe Stump
parent 5dcb9ba1e2
commit 5cc73ac5a5
No known key found for this signature in database
GPG Key ID: 29151C3EC48A0EB9

View File

@ -38,6 +38,7 @@ RestrictNamespaces=yes
RestrictRealtime=yes
SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources
SystemCallFilter=setrlimit
SystemCallArchitectures=native
UMask=0066