From d62b05d75b4835711bab2f4fab3b4dc70b4bd08d Mon Sep 17 00:00:00 2001
From: Christoph Honal <christoph.honal@web.de>
Date: Thu, 9 Apr 2026 14:39:14 +0200
Subject: [PATCH] nixos/nfc-nci: Adjust pcscd system call hardening

---
 nixos/modules/hardware/nfc-nci.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/nixos/modules/hardware/nfc-nci.nix b/nixos/modules/hardware/nfc-nci.nix
index 34d69db2115c..21c2e859ad8d 100644
--- a/nixos/modules/hardware/nfc-nci.nix
+++ b/nixos/modules/hardware/nfc-nci.nix
@@ -185,6 +185,11 @@ in
       "nxp-pn5xx"
     ];
 
+    # libnfc-nci calls sched_setscheduler via pthread_setschedparam, which would be blocked by upstream SystemCallFilter=~@resources
+    systemd.services.pcscd.serviceConfig.SystemCallFilter = lib.mkIf cfg.enableIFD [
+      "sched_setscheduler"
+    ];
+
     services.pcscd.readerConfigs = lib.mkIf cfg.enableIFD [
       ''
         FRIENDLYNAME "NFC NCI"