nixos/zwave-js-ui: Add chown to allowed syscalls (#380999)

Changed files
+2 -1
nixos
modules
services
home-automation
tests
+1
nixos/modules/services/home-automation/zwave-js-ui.nix
···
SystemCallFilter = [
"@system-service @pkey"
"~@privileged @resources"
+
"@chown"
];
UMask = "0077";
};
+1 -1
nixos/tests/zwave-js-ui.nix
···
machine.wait_for_unit("zwave-js-ui.service")
machine.wait_for_open_port(9999)
machine.wait_until_succeeds("journalctl --since -1m --unit zwave-js-ui --grep 'Listening on port 9999host :: protocol HTTP'")
-
machine.wait_for_file("/var/lib/zwave-js-ui/nodes.json")
+
machine.wait_for_file("/var/lib/zwave-js-ui/users.json")
'';
}
)