nixos/archisteamfarm: add mincore to SystemCallFilter

Signed-off-by: Ludovico Piero <[email protected]>
prinzdezibel · Dec 6, 2024 · 4b5e020 · 4b5e020
1 parent 2a6b716
commit 4b5e020
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nixos/modules/services/games/archisteamfarm.nix b/nixos/modules/services/games/archisteamfarm.nix
@@ -221,7 +221,7 @@ in
             RestrictSUIDSGID = true;
             SecureBits = "noroot-locked";
             SystemCallArchitectures = "native";
-            SystemCallFilter = [ "@system-service" "~@privileged" ];
+            SystemCallFilter = [ "@system-service" "~@privileged" "mincore" ];
             UMask = "0077";
           }
         ];