summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorEmery Hemingway <emery@vfemail.net>2017-05-26 11:27:15 -0500
committerEmery Hemingway <git@spam.works>2017-05-26 11:41:10 -0500
commit12b6c4d4de17d1b8b37a74319f48c964166a6670 (patch)
treeeb142bd5f3b4113376ffbacc3cc9f8897e3d4b49 /nixos
parent87c1097af1df88f79954b0e964daeb27915067a9 (diff)
downloadnixlib-12b6c4d4de17d1b8b37a74319f48c964166a6670.tar
nixlib-12b6c4d4de17d1b8b37a74319f48c964166a6670.tar.gz
nixlib-12b6c4d4de17d1b8b37a74319f48c964166a6670.tar.bz2
nixlib-12b6c4d4de17d1b8b37a74319f48c964166a6670.tar.lz
nixlib-12b6c4d4de17d1b8b37a74319f48c964166a6670.tar.xz
nixlib-12b6c4d4de17d1b8b37a74319f48c964166a6670.tar.zst
nixlib-12b6c4d4de17d1b8b37a74319f48c964166a6670.zip
u9fs service: grant capabilities for running as nobody
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/network-filesystems/u9fs.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/services/network-filesystems/u9fs.nix b/nixos/modules/services/network-filesystems/u9fs.nix
index 8bc37f0f62c3..4f37fc2a9e5c 100644
--- a/nixos/modules/services/network-filesystems/u9fs.nix
+++ b/nixos/modules/services/network-filesystems/u9fs.nix
@@ -67,6 +67,7 @@ in
             StandardInput = "socket";
             StandardError = "journal";
             User = cfg.user;
+            AmbientCapabilities = "cap_setuid cap_setgid";
           };
       };
     };