joinmarket-ob-watcher: allow required 'mbind' system call

2021-08-05 00:49:05 +02:00
parent ca64a4a64f
commit 161baa7e68
1 changed files with 1 additions and 0 deletions
--- a/modules/joinmarket-ob-watcher.nix
+++ b/modules/joinmarket-ob-watcher.nix
@@ -80,6 +80,7 @@ in {
          ${nbPkgs.joinmarket}/bin/ob-watcher --datadir=${cfg.dataDir} \
            --host=${cfg.address} --port=${toString cfg.port}
        '';
+        SystemCallFilter = nbLib.defaultHardening.SystemCallFilter ++ [ "mbind" ] ;
        Restart = "on-failure";
        RestartSec = "10s";
      } // nbLib.allowTor;