nixos/logrotate: reorder setuid syscall group

Relevant parts of @setuid are in @privileged, so we need to flip the order around, to grant @setuid in spite of denying @privileged.
2024-09-30 13:26:14 +02:00
parent 7c8fc691cf
commit 2dabc4fce1
1 changed files with 2 additions and 2 deletions
@@ -285,9 +285,9 @@ in
        RestrictSUIDSGID = false; # can create sgid directories
        SystemCallArchitectures = "native";
        SystemCallFilter = [
-          "@system-service @setuid"
+          "@system-service"
          "~@privileged @resources"
-          "@chown"
+          "@chown @setuid"
        ];
        UMask = "0027";
      } // lib.optionalAttrs (!cfg.allowNetworking) {