nixos/gitea: update SystemCallFilter

2023-01-31 10:08:32 -06:00
parent 239a93f205
commit 59dbe319ce
1 changed files with 1 additions and 1 deletions
@@ -203,7 +203,7 @@ in
          PrivateMounts = true;
          # System Call Filtering
          SystemCallArchitectures = "native";
-          SystemCallFilter = [ "~@cpu-emulation @debug @keyring @mount @obsolete @privileged @resources" "@clock" "@setuid" "capset" "chown" ];
+          SystemCallFilter = [ "~@cpu-emulation @debug @keyring @mount @obsolete @privileged @resources" "@clock" "@setuid" "capset" "chown" ] ++ lib.optional pkgs.stdenv.hostPlatform.isAarch64 "fchownat";
        };
      };
  };