u9fs service: grant capabilities for running as nobody

2017-05-26 11:27:15 -05:00 · 2017-05-26 11:27:15 -05:00 · 12b6c4d4de
commit 12b6c4d4de
parent 87c1097af1
1 changed files with 1 additions and 0 deletions
--- a/nixos/modules/services/network-filesystems/u9fs.nix
+++ b/nixos/modules/services/network-filesystems/u9fs.nix
@ -67,6 +67,7 @@ in
            StandardInput = "socket";
            StandardError = "journal";
            User = cfg.user;
+            AmbientCapabilities = "cap_setuid cap_setgid";
          };
      };
    };