nixos/matrix-appservice-irc: fix syscall filter

The pre-start script requires @chown; the service fails without it.
2023-12-02 12:03:58 -08:00 · 2023-12-02 12:03:58 -08:00 · dffba14043
commit dffba14043
parent ab3ea20adf
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/matrix/appservice-irc.nix
+++ b/nixos/modules/services/matrix/appservice-irc.nix
@ -214,7 +214,7 @@ in {
        RestrictRealtime = true;
        PrivateMounts = true;
        SystemCallFilter = [
-          "@system-service @pkey"
+          "@system-service @pkey @chown"
          "~@privileged @resources"
        ];
        SystemCallArchitectures = "native";