Merge pull request #271740 from Ralith/fix-irc-filter

nixos/matrix-appservice-irc: fix syscall filter
2023-12-02 21:32:37 +01:00 · 2023-12-02 21:32:37 +01:00 · e274bc3056
commit e274bc3056
parent 9d60cc848d dffba14043
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/matrix/appservice-irc.nix
+++ b/nixos/modules/services/matrix/appservice-irc.nix
@ -214,7 +214,7 @@ in {
        RestrictRealtime = true;
        PrivateMounts = true;
        SystemCallFilter = [
-          "@system-service @pkey"
+          "@system-service @pkey @chown"
          "~@privileged @resources"
        ];
        SystemCallArchitectures = "native";