nixos/matrix-appservice-irc: fix syscall filter
The pre-start script requires @chown; the service fails without it.
This commit is contained in:
parent
ab3ea20adf
commit
dffba14043
@ -214,7 +214,7 @@ in {
|
||||
RestrictRealtime = true;
|
||||
PrivateMounts = true;
|
||||
SystemCallFilter = [
|
||||
"@system-service @pkey"
|
||||
"@system-service @pkey @chown"
|
||||
"~@privileged @resources"
|
||||
];
|
||||
SystemCallArchitectures = "native";
|
||||
|
Loading…
Reference in New Issue
Block a user