mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-09-30 11:50:06 +00:00
nixos/botamusique: allow syscalls in the @resources group
Calls to ffmpeg from botamusique require the `set_mempolicy` syscall.
Fixes: #205702
(cherry picked from commit d6f4f4584a)
This commit is contained in:
committed by
github-actions[bot]
parent
06278c77b5
commit
3f85bbafcb
@@ -103,9 +103,8 @@ in
|
||||
StateDirectory = "botamusique";
|
||||
SystemCallArchitectures = "native";
|
||||
SystemCallFilter = [
|
||||
"@system-service"
|
||||
"@system-service @resources"
|
||||
"~@privileged"
|
||||
"~@resources"
|
||||
];
|
||||
UMask = "0077";
|
||||
WorkingDirectory = "/var/lib/botamusique";
|
||||
|
||||
Reference in New Issue
Block a user