nixos/matrix-appservice-irc: fix syscall filter

The pre-start script requires @chown; the service fails without it.
This commit is contained in:
Benjamin Saunders 2023-12-02 12:03:58 -08:00
parent ab3ea20adf
commit dffba14043

View File

@ -214,7 +214,7 @@ in {
RestrictRealtime = true;
PrivateMounts = true;
SystemCallFilter = [
"@system-service @pkey"
"@system-service @pkey @chown"
"~@privileged @resources"
];
SystemCallArchitectures = "native";