From 8a00a83c719fc2c0e3ccb2f20aee15a8d72836ef Mon Sep 17 00:00:00 2001
From: Ophestra <cat@gensokyo.uk>
Date: Thu, 23 Jan 2025 17:24:42 +0900
Subject: nix: expose syscall filter policy

Signed-off-by: Ophestra <cat@gensokyo.uk>
---
 nixos.nix | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'nixos.nix')

diff --git a/nixos.nix b/nixos.nix
index 84e58c79..8706d318 100644
--- a/nixos.nix
+++ b/nixos.nix
@@ -117,6 +117,9 @@ in
                           dev
                           env
                           ;
+                        syscall = {
+                          inherit (app) devel multiarch bluetooth;
+                        };
                         map_real_uid = app.mapRealUid;
                         no_new_session = app.tty;
                         filesystem =
-- 
cgit v1.3.1