Add mincore to allowed system calls for renderd

openstreetmap · Dec 20, 2023 · d4220f9 · d4220f9
1 parent 68db87b
commit d4220f9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cookbooks/tile/recipes/default.rb b/cookbooks/tile/recipes/default.rb
@@ -116,7 +116,7 @@
   sandbox true
   restrict_address_families "AF_UNIX"
   read_write_paths tile_directories
-  system_call_filter ["@known"]
+  system_call_filter ["@system-service", "mincore"]
   restart "on-failure"
 end