Merge pull request #259888 from julianschacher/matrix-synapse-fix-media-store-access

nixos/matrix-synapse: add `media_store_path` to services `ReadWritePaths`
This commit is contained in:
Maximilian Bosch 2023-10-10 11:40:45 +02:00 committed by GitHub
commit 791fe98a0d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1070,7 +1070,7 @@ in {
ProtectKernelTunables = true;
ProtectProc = "invisible";
ProtectSystem = "strict";
ReadWritePaths = [ cfg.dataDir ];
ReadWritePaths = [ cfg.dataDir cfg.settings.media_store_path ];
RemoveIPC = true;
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ];
RestrictNamespaces = true;