···

       
545
       
545
       
 
       
        RuntimeDirectory = "mastodon-web";

     

       
546
       
546
       
 
       
        RuntimeDirectoryMode = "0750";

     

       
547
       
547
       
 
       
        # System Call Filtering

     

       
548
       
548
       
-
       
        SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" "pipe" "pipe2" ];

     

       
548
       
548
       
+
       
        SystemCallFilter = [ ("~" + lib.concatStringsSep " " systemCallsList) "@chown" "pipe" "pipe2" ];

     

       
549
       
549
       
 
       
      } // cfgService;

     

       
550
       
550
       
 
       
      path = with pkgs; [ file imagemagick ffmpeg ];

     

       
551
       
551
       
 
       
    };