nixos/botamusique: allow syscalls in the @resources group

Calls to ffmpeg from botamusique require the `set_mempolicy` syscall.

Fixes: #205702
(cherry picked from commit d6f4f4584a)
This commit is contained in:
Martin Weinelt
2022-12-12 15:36:58 +01:00
committed by github-actions[bot]
parent 06278c77b5
commit 3f85bbafcb

View File

@@ -103,9 +103,8 @@ in
StateDirectory = "botamusique";
SystemCallArchitectures = "native";
SystemCallFilter = [
"@system-service"
"@system-service @resources"
"~@privileged"
"~@resources"
];
UMask = "0077";
WorkingDirectory = "/var/lib/botamusique";