diff options
| author | Martin Weinelt <hexa@darmstadt.ccc.de> | 2022-12-12 15:36:58 +0100 |
|---|---|---|
| committer | Martin Weinelt <hexa@darmstadt.ccc.de> | 2022-12-12 15:36:58 +0100 |
| commit | d6f4f4584ae5f04c4f5caf7574106025b34ab883 (patch) | |
| tree | 24fa9e17656eaacc91b9328573ba81b9bdd5ea66 /nixos/modules/services/audio | |
| parent | 72ce854d2ea0883e0e506555f0598ea04d1a4c95 (diff) | |
| download | nixlib-d6f4f4584ae5f04c4f5caf7574106025b34ab883.tar nixlib-d6f4f4584ae5f04c4f5caf7574106025b34ab883.tar.gz nixlib-d6f4f4584ae5f04c4f5caf7574106025b34ab883.tar.bz2 nixlib-d6f4f4584ae5f04c4f5caf7574106025b34ab883.tar.lz nixlib-d6f4f4584ae5f04c4f5caf7574106025b34ab883.tar.xz nixlib-d6f4f4584ae5f04c4f5caf7574106025b34ab883.tar.zst nixlib-d6f4f4584ae5f04c4f5caf7574106025b34ab883.zip | |
nixos/botamusique: allow syscalls in the @resources group
Calls to ffmpeg from botamusique require the `set_mempolicy` syscall. Fixes: #205702
Diffstat (limited to 'nixos/modules/services/audio')
| -rw-r--r-- | nixos/modules/services/audio/botamusique.nix | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/nixos/modules/services/audio/botamusique.nix b/nixos/modules/services/audio/botamusique.nix index 4cd900f945c8..5d3f7db12bc9 100644 --- a/nixos/modules/services/audio/botamusique.nix +++ b/nixos/modules/services/audio/botamusique.nix @@ -103,9 +103,8 @@ in StateDirectory = "botamusique"; SystemCallArchitectures = "native"; SystemCallFilter = [ - "@system-service" + "@system-service @resources" "~@privileged" - "~@resources" ]; UMask = "0077"; WorkingDirectory = "/var/lib/botamusique"; |