u9fs service: grant capabilities for running as nobody

ehmry · Emery Hemingway · commit 12b6c4d4de17 · 2017-05-26T11:41:10.000-05:00
diff --git a/nixos/modules/services/network-filesystems/u9fs.nix b/nixos/modules/services/network-filesystems/u9fs.nix
@@ -67,6 +67,7 @@ in
             StandardInput = "socket";
             StandardError = "journal";
             User = cfg.user;
+            AmbientCapabilities = "cap_setuid cap_setgid";
           };
       };
     };
