From: Samir Benmendil <me@rmz.io>
Date: Tue, 29 Dec 2020 14:39:08 +0000 (+0000)
Subject: mkosi/kodi: cleanup Capability and SystemCallFilter
X-Git-Url: https://git.rmz.io/dotfiles.git/commitdiff_plain/93cac03a9d0fd109e2754dea565f2c8bfbf86388

mkosi/kodi: cleanup Capability and SystemCallFilter

Most were not needed.
---

diff --git a/mkosi/kodi/mkosi.nspawn b/mkosi/kodi/mkosi.nspawn
index f731920..61bb674 100644
--- a/mkosi/kodi/mkosi.nspawn
+++ b/mkosi/kodi/mkosi.nspawn
@@ -1,7 +1,5 @@
 [Exec]
 PrivateUsers=no
-Capability=all
-SystemCallFilter=@default @raw-io @system-service @known
 
 [Files]
 # binds host kodi home folder into nspawn
diff --git a/mkosi/kodi/override.conf b/mkosi/kodi/override.conf
index 25c5a09..556d830 100644
--- a/mkosi/kodi/override.conf
+++ b/mkosi/kodi/override.conf
@@ -2,12 +2,10 @@
 Conflicts=getty@tty1.service
 
 [Service]
-DeviceAllow=char-BaseRemoteCtl rwm
-DeviceAllow=char-drm rwm
-DeviceAllow=char-hidraw rwm
-DeviceAllow=char-input rwm
-DeviceAllow=char-shm rwm
-DeviceAllow=char-tty rwm
-DeviceAllow=char-usb_device rwm
-
 MemoryHigh=6G
+
+DeviceAllow=char-tty rw
+DeviceAllow=char-drm rw
+
+DeviceAllow=char-BaseRemoteCtl rw
+DeviceAllow=char-input rw