From e1642afb01af85c13d3aeb5c0e70840684a03f2a Mon Sep 17 00:00:00 2001
From: Faye Duxovni <fayed@element.io>
Date: Tue, 15 Mar 2022 13:43:54 -0400
Subject: [PATCH] kernel: common-config.nix: enable FANOTIFY_ACCESS_PERMISSIONS

Required for, eg, ClamAV's OnAccessPrevention feature.
---
 pkgs/os-specific/linux/kernel/common-config.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/os-specific/linux/kernel/common-config.nix b/pkgs/os-specific/linux/kernel/common-config.nix
index 717fdaee72a5..103f6127c659 100644
--- a/pkgs/os-specific/linux/kernel/common-config.nix
+++ b/pkgs/os-specific/linux/kernel/common-config.nix
@@ -353,7 +353,9 @@ let
     # Filesystem options - in particular, enable extended attributes and
     # ACLs for all filesystems that support them.
     filesystem = {
-      FANOTIFY        = yes;
+      FANOTIFY                    = yes;
+      FANOTIFY_ACCESS_PERMISSIONS = yes;
+
       TMPFS           = yes;
       TMPFS_POSIX_ACL = yes;
       FS_ENCRYPTION   = if (versionAtLeast version "5.1") then yes else whenAtLeast "4.9" (option module);