nixos/zwave-js-ui: Add chown to allowed syscalls (#380999)
This commit is contained in:
@@ -111,6 +111,7 @@ in
|
||||
SystemCallFilter = [
|
||||
"@system-service @pkey"
|
||||
"~@privileged @resources"
|
||||
"@chown"
|
||||
];
|
||||
UMask = "0077";
|
||||
};
|
||||
|
||||
@@ -25,7 +25,7 @@ import ./make-test-python.nix (
|
||||
machine.wait_for_unit("zwave-js-ui.service")
|
||||
machine.wait_for_open_port(9999)
|
||||
machine.wait_until_succeeds("journalctl --since -1m --unit zwave-js-ui --grep 'Listening on port 9999host :: protocol HTTP'")
|
||||
machine.wait_for_file("/var/lib/zwave-js-ui/nodes.json")
|
||||
machine.wait_for_file("/var/lib/zwave-js-ui/users.json")
|
||||
'';
|
||||
}
|
||||
)
|
||||
|
||||
Reference in New Issue
Block a user