nixos/syncoid: allow @timer syscalls

Syncoid uses `pv` to display information about transfer speeds. During the pv bump from 1.10.5 to 1.11.0 it started using the setitimer syscall (included by `@timer`) which would segfault given that the sandbox configuration was set to block all syscalls in the `@timer` group
2026-06-27 18:15:54 -07:00
parent d1bf80c1f3
commit 22fff7274f
1 changed files with 2 additions and 1 deletions
@@ -459,7 +459,8 @@ in
                "~@privileged"
                "~@resources"
                "~@setuid"
-                "~@timer"
+                # NB: pv after 1.11.0 uses timer syscalls (specifically setitimer)
+                # "~@timer"
              ];
              SystemCallArchitectures = "native";
              # This is for BindPaths= and BindReadOnlyPaths=