nixos/zwave-js-ui: Add chown to allowed syscalls (#380999)

This commit is contained in:
Arne Keller
2025-03-10 08:47:46 +01:00
committed by GitHub
2 changed files with 2 additions and 1 deletions
@@ -111,6 +111,7 @@ in
SystemCallFilter = [
"@system-service @pkey"
"~@privileged @resources"
"@chown"
];
UMask = "0077";
};
+1 -1
View File
@@ -25,7 +25,7 @@ import ./make-test-python.nix (
machine.wait_for_unit("zwave-js-ui.service")
machine.wait_for_open_port(9999)
machine.wait_until_succeeds("journalctl --since -1m --unit zwave-js-ui --grep 'Listening on port 9999host :: protocol HTTP'")
machine.wait_for_file("/var/lib/zwave-js-ui/nodes.json")
machine.wait_for_file("/var/lib/zwave-js-ui/users.json")
'';
}
)