From: Tom Hughes <tom@compton.nu>
Date: Wed, 20 Dec 2023 19:45:05 +0000 (+0000)
Subject: Relax system call filter for renderd
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/559c32d3c6629da2e112a00f75e7319d89ee2d90

Relax system call filter for renderd
---

diff --git a/cookbooks/tile/recipes/default.rb b/cookbooks/tile/recipes/default.rb
index ce3ffcb9c..a7073575c 100644
--- a/cookbooks/tile/recipes/default.rb
+++ b/cookbooks/tile/recipes/default.rb
@@ -116,6 +116,7 @@ systemd_service "renderd" do
   sandbox true
   restrict_address_families "AF_UNIX"
   read_write_paths tile_directories
+  system_call_filter ["@known"]
   restart "on-failure"
 end