Commit 59dbe319 authored by Izorkin's avatar Izorkin Committed by Austin Seipp
Browse files

nixos/gitea: update SystemCallFilter

parent 239a93f2

nixos/modules/services/networking/ntp/chrony.nix

+1 −1
Original line number Diff line number Diff line
@@ -203,7 +203,7 @@ in 
          PrivateMounts = true;

          # System Call Filtering

          SystemCallArchitectures = "native";

          SystemCallFilter = [ "~@cpu-emulation @debug @keyring @mount @obsolete @privileged @resources" "@clock" "@setuid" "capset" "chown" ];

          SystemCallFilter = [ "~@cpu-emulation @debug @keyring @mount @obsolete @privileged @resources" "@clock" "@setuid" "capset" "chown" ] ++ lib.optional pkgs.stdenv.hostPlatform.isAarch64 "fchownat";

        };

      };

  };