Merge pull request #307264 from pks-t/pks-matrix-appservice-irc-fix-chown-registration-yml

nixos/matrix-appservice-irc: fix chown of registration.yml in pre-script
2024-04-27 21:12:38 +02:00 · 2024-04-27 21:12:38 +02:00 · 2b1f64b358
commit 2b1f64b358
parent 0e5f13c967 ff3358b3f5
1 changed files with 2 additions and 1 deletions
--- a/nixos/modules/services/matrix/appservice-irc.nix
+++ b/nixos/modules/services/matrix/appservice-irc.nix
@ -214,8 +214,9 @@ in {
        RestrictRealtime = true;
        PrivateMounts = true;
        SystemCallFilter = [
-          "@system-service @pkey @chown"
+          "@system-service @pkey"
          "~@privileged @resources"
+          "@chown"
        ];
        SystemCallArchitectures = "native";
        # AF_UNIX is required to connect to a postgres socket.