commit 5d685e0eed043faa6ee397569b58cb5162c4a7dd · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

nixos/zigbee2mqtt: Update syscall filter

The tests would fail after migrating to `buildNpmPackage`, likely
because we are now using nodejs 18.

> audit: type=1326 audit(1670092271.655:102): auid=4294967295 uid=317 gid=317 ses=4294967295 subj=kernel pid=995 comm="node" exe="/nix/store/dj805sw07vvpbxx39c8g67x8qddg0ikw-nodejs-18.12.1/bin/node" sig=31 arch=c000003e syscall=330 compat=0 ip=0x7ff8b655f37b code=0x8000000

Martin Weinelt 3 years ago 5d685e0e feb66d6f

options

unified split

Changed files

+2 -3

nixos

modules

services

home-automation

zigbee2mqtt.nix

+2 -3

nixos/modules/services/home-automation/zigbee2mqtt.nix

···

       119
       119
        
               ];

     

       120
       120
        
               SystemCallArchitectures = "native";

     

       121
       121
        
               SystemCallFilter = [

     

       122
       122
       -
                 "@system-service"

     

       123
       123
       -
                 "~@privileged"

     

       124
       124
       -
                 "~@resources"

     

       122
       122
       +
                 "@system-service @pkey"

     

       123
       123
       +
                 "~@privileged @resources"

     

       125
       124
        
               ];

     

       126
       125
        
               UMask = "0077";

     

       127
       126
        
             };