This appears to be used by newer go versions and navidrome fails to start unless it's allowed. Signed-off-by: Jeff Henson <jeff@henson.io>
This commit is contained in:
parent
c12510d6e2
commit
6d3d005fca
1 changed files with 1 additions and 0 deletions
|
|
@ -38,6 +38,7 @@ RestrictNamespaces=yes
|
||||||
RestrictRealtime=yes
|
RestrictRealtime=yes
|
||||||
SystemCallFilter=@system-service
|
SystemCallFilter=@system-service
|
||||||
SystemCallFilter=~@privileged @resources
|
SystemCallFilter=~@privileged @resources
|
||||||
|
SystemCallFilter=setrlimit
|
||||||
SystemCallArchitectures=native
|
SystemCallArchitectures=native
|
||||||
UMask=0066
|
UMask=0066
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue