From 4b5e02043f6963344b2aaa49796d8942628d5fed Mon Sep 17 00:00:00 2001
From: Ludovico Piero <lewdovico@gnuweeb.org>
Date: Sat, 7 Dec 2024 03:31:21 +0900
Subject: [PATCH] nixos/archisteamfarm: add mincore to SystemCallFilter

Signed-off-by: Ludovico Piero <lewdovico@gnuweeb.org>
---
 nixos/modules/services/games/archisteamfarm.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/games/archisteamfarm.nix b/nixos/modules/services/games/archisteamfarm.nix
index 77a64a4b426d..744115604f41 100644
--- a/nixos/modules/services/games/archisteamfarm.nix
+++ b/nixos/modules/services/games/archisteamfarm.nix
@@ -221,7 +221,7 @@ in
             RestrictSUIDSGID = true;
             SecureBits = "noroot-locked";
             SystemCallArchitectures = "native";
-            SystemCallFilter = [ "@system-service" "~@privileged" ];
+            SystemCallFilter = [ "@system-service" "~@privileged" "mincore" ];
             UMask = "0077";
           }
         ];