Unverified Commit d6f4f458 authored by Martin Weinelt's avatar Martin Weinelt
Browse files

nixos/botamusique: allow syscalls in the @resources group 

Calls to ffmpeg from botamusique require the `set_mempolicy` syscall.

Fixes: #205702
parent 72ce854d

nixos/modules/services/audio/botamusique.nix

+1 −2
Original line number Diff line number Diff line
@@ -103,9 +103,8 @@ in 
        StateDirectory = "botamusique";

        SystemCallArchitectures = "native";

        SystemCallFilter = [

          "@system-service"

          "@system-service @resources"

          "~@privileged"

          "~@resources"

        ];

        UMask = "0077";

        WorkingDirectory = "/var/lib/botamusique";