nix: expose syscall filter policy

Signed-off-by: Ophestra <cat@gensokyo.uk>

1 files changed, 3 insertions, 0 deletions

diff --git a/nixos.nix b/nixos.nix
index 84e58c79..8706d318 100644
--- a/nixos.nix
+++ b/nixos.nix
@@ -117,6 +117,9 @@ in
                           dev
                           env
                           ;
+                        syscall = {
+                          inherit (app) devel multiarch bluetooth;
+                        };
                         map_real_uid = app.mapRealUid;
                         no_new_session = app.tty;
                         filesystem =