mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-12-14 09:43:14 +00:00
ff3358b3f5
Before the startup, the matrix-appservice-irc service sets up the registration file such that it can be used by matrix-synapse. Part of that setup requires us to change the group of said file so that the home server can read it. Consequently, we need CAP_CHOWN and require that the @chown system calls are allowed. While we supposedly set up both of these, the setup of system calls is broken as we have both an allow and a deny list of syscalls. But while the allow list contains "@chown", the deny list contains "@privileged" which contains "@chown" itself. So ultimately, we end up denying "@chown". Fix this issue by specifying "@chown" after the deny list. |
||
---|---|---|
.. | ||
appservice-discord.nix | ||
appservice-irc.nix | ||
conduit.nix | ||
dendrite.nix | ||
hebbot.nix | ||
matrix-sliding-sync.nix | ||
maubot.md | ||
maubot.nix | ||
mautrix-facebook.nix | ||
mautrix-meta.nix | ||
mautrix-telegram.nix | ||
mautrix-whatsapp.nix | ||
mjolnir.md | ||
mjolnir.nix | ||
mx-puppet-discord.nix | ||
pantalaimon-options.nix | ||
pantalaimon.nix | ||
synapse.md | ||
synapse.nix |