nix: expose compat flag in nixos module

Signed-off-by: Ophestra <cat@gensokyo.uk>

2 files changed, 2 insertions, 1 deletions

diff --git a/nixos.nix b/nixos.nix
index fa5ac984..02d94f96 100644
--- a/nixos.nix
+++ b/nixos.nix
@@ -118,7 +118,7 @@ in
                           env
                           ;
                         syscall = {
-                          inherit (app) multiarch bluetooth;
+                          inherit (app) compat multiarch bluetooth;
                           deny_devel = !app.devel;
                         };
                         map_real_uid = app.mapRealUid;
diff --git a/options.nix b/options.nix
index e2c44cc6..7f44ef4c 100644
--- a/options.nix
+++ b/options.nix
@@ -151,6 +151,7 @@ in
                 default = true;
               };
 
+              compat = mkEnableOption "disable syscall filter extensions";
               devel = mkEnableOption "development kernel APIs";
               multiarch = mkEnableOption "multiarch kernel support";
               bluetooth = mkEnableOption "AF_BLUETOOTH socket operations";