From dc532959a0d0ba1b05dd2bb878e6a30b55077ada Mon Sep 17 00:00:00 2001
From: Infinidoge <infinidoge@inx.moe>
Date: Wed, 12 Mar 2025 22:55:17 -0400
Subject: [PATCH] Infini-DL360/hedgedoc: add chown to syscall filter

---
 hosts/Infini-DL360/hedgedoc.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/Infini-DL360/hedgedoc.nix b/hosts/Infini-DL360/hedgedoc.nix
index ce747b7..61c988c 100644
--- a/hosts/Infini-DL360/hedgedoc.nix
+++ b/hosts/Infini-DL360/hedgedoc.nix
@@ -36,5 +36,6 @@ in
 
   systemd.services.hedgedoc.serviceConfig = {
     ReadWritePaths = [ "-/srv/hedgedoc" ];
+    SystemCallFilter = [ "@chown" ];
   };
 }