about summary refs log tree commit diff
path: root/nixos/modules
diff options
context:
space:
mode:
authorMartin Weinelt <hexa@darmstadt.ccc.de>2022-12-03 19:42:50 +0100
committerMartin Weinelt <hexa@darmstadt.ccc.de>2022-12-03 19:57:50 +0100
commit5d685e0eed043faa6ee397569b58cb5162c4a7dd (patch)
tree3ab58b1ed58de803943dfe0ed87caa18e9a8ebf0 /nixos/modules
parentfeb66d6fd867750f7d6c37dd1404ea2c74ac2bfc (diff)
nixos/zigbee2mqtt: Update syscall filter
The tests would fail after migrating to `buildNpmPackage`, likely
because we are now using nodejs 18.

> audit: type=1326 audit(1670092271.655:102): auid=4294967295 uid=317 gid=317 ses=4294967295 subj=kernel pid=995 comm="node" exe="/nix/store/dj805sw07vvpbxx39c8g67x8qddg0ikw-nodejs-18.12.1/bin/node" sig=31 arch=c000003e syscall=330 compat=0 ip=0x7ff8b655f37b code=0x8000000
Diffstat (limited to 'nixos/modules')
-rw-r--r--nixos/modules/services/home-automation/zigbee2mqtt.nix5
1 files changed, 2 insertions, 3 deletions
diff --git a/nixos/modules/services/home-automation/zigbee2mqtt.nix b/nixos/modules/services/home-automation/zigbee2mqtt.nix
index 71f6e7a258404..796de3a491e49 100644
--- a/nixos/modules/services/home-automation/zigbee2mqtt.nix
+++ b/nixos/modules/services/home-automation/zigbee2mqtt.nix
@@ -119,9 +119,8 @@ in
         ];
         SystemCallArchitectures = "native";
         SystemCallFilter = [
-          "@system-service"
-          "~@privileged"
-          "~@resources"
+          "@system-service @pkey"
+          "~@privileged @resources"
         ];
         UMask = "0077";
       };