From 559c32d3c6629da2e112a00f75e7319d89ee2d90 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Wed, 20 Dec 2023 19:45:05 +0000 Subject: [PATCH] Relax system call filter for renderd --- cookbooks/tile/recipes/default.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/cookbooks/tile/recipes/default.rb b/cookbooks/tile/recipes/default.rb index ce3ffcb9c..a7073575c 100644 --- a/cookbooks/tile/recipes/default.rb +++ b/cookbooks/tile/recipes/default.rb @@ -116,6 +116,7 @@ systemd_service "renderd" do sandbox true restrict_address_families "AF_UNIX" read_write_paths tile_directories + system_call_filter ["@known"] restart "on-failure" end -- 2.45.1