Unverified Commit 9b62d5e2 authored by Arne Keller's avatar Arne Keller Committed by GitHub
Browse files

nixos/zwave-js-ui: Add chown to allowed syscalls (#380999)

parents 0e01c4a3 63157e34

nixos/modules/services/home-automation/zwave-js-ui.nix

+1 −0
Original line number Diff line number Diff line
@@ -111,6 +111,7 @@ in 
        SystemCallFilter = [

          "@system-service @pkey"

          "~@privileged @resources"

          "@chown"

        ];

        UMask = "0077";

      };

nixos/tests/zwave-js-ui.nix

+1 −1
Original line number Diff line number Diff line
@@ -25,7 +25,7 @@ import ./make-test-python.nix ( 
      machine.wait_for_unit("zwave-js-ui.service")

      machine.wait_for_open_port(9999)

      machine.wait_until_succeeds("journalctl --since -1m --unit zwave-js-ui --grep 'Listening on port 9999host :: protocol HTTP'")

      machine.wait_for_file("/var/lib/zwave-js-ui/nodes.json")

      machine.wait_for_file("/var/lib/zwave-js-ui/users.json")

    '';

  }

)