mkosi/kodi: cleanup Capability and SystemCallFilter

Most were not needed.

diff --git a/mkosi/kodi/mkosi.nspawn b/mkosi/kodi/mkosi.nspawn
index f731920cbd8ac8902fec8f0e43420daec51e7401..61bb674d7a8103d4f432b91db449076361493387 100644 (file)
--- a/mkosi/kodi/mkosi.nspawn
+++ b/mkosi/kodi/mkosi.nspawn
@@ -1,7 +1,5 @@
 [Exec]
 PrivateUsers=no
-Capability=all
-SystemCallFilter=@default @raw-io @system-service @known
 
 [Files]
 # binds host kodi home folder into nspawn

diff --git a/mkosi/kodi/override.conf b/mkosi/kodi/override.conf
index 25c5a091c2627112399734166ffa2e719615c04b..556d830094422e0453aabd9ead87ef55c074fcaf 100644 (file)
--- a/mkosi/kodi/override.conf
+++ b/mkosi/kodi/override.conf
@@ -2,12 +2,10 @@
 Conflicts=getty@tty1.service
 
 [Service]
-DeviceAllow=char-BaseRemoteCtl rwm
-DeviceAllow=char-drm rwm
-DeviceAllow=char-hidraw rwm
-DeviceAllow=char-input rwm
-DeviceAllow=char-shm rwm
-DeviceAllow=char-tty rwm
-DeviceAllow=char-usb_device rwm
-
 MemoryHigh=6G
+
+DeviceAllow=char-tty rw
+DeviceAllow=char-drm rw
+
+DeviceAllow=char-BaseRemoteCtl rw
+DeviceAllow=char-input rw