From 695b1c874d6ca6a0b9f8dca24ad04e2ec307c296 Mon Sep 17 00:00:00 2001
From: Tomodachi94 <tomodachi94@protonmail.com>
Date: Fri, 23 Aug 2024 17:09:11 -0700
Subject: [PATCH] nixos/clamav: add system-clamav.slice

Tracking: https://github.com/NixOS/nixpkgs/issues/279915
---
 nixos/modules/services/security/clamav.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/nixos/modules/services/security/clamav.nix b/nixos/modules/services/security/clamav.nix
index a23c19f685d2d16..90b69df2d4a3d63 100644
--- a/nixos/modules/services/security/clamav.nix
+++ b/nixos/modules/services/security/clamav.nix
@@ -164,6 +164,10 @@ in
     environment.etc."clamav/freshclam.conf".source = freshclamConfigFile;
     environment.etc."clamav/clamd.conf".source = clamdConfigFile;
 
+    systemd.slices.system-clamav = {
+      description = "ClamAV slice";
+    };
+
     systemd.services.clamav-daemon = mkIf cfg.daemon.enable {
       description = "ClamAV daemon (clamd)";
       after = optionals cfg.updater.enable [ "clamav-freshclam.service" ];
@@ -181,6 +185,7 @@ in
         PrivateTmp = "yes";
         PrivateDevices = "yes";
         PrivateNetwork = "yes";
+        Slice = "system-clamav.slice";
       };
     };
 
@@ -208,6 +213,7 @@ in
         Group = clamavGroup;
         PrivateTmp = "yes";
         PrivateDevices = "yes";
+        Slice = "system-clamav.slice";
       };
     };
 
@@ -229,6 +235,7 @@ in
         Group = clamavGroup;
         PrivateTmp = "yes";
         PrivateDevices = "yes";
+        Slice = "system-clamav.slice";
       };
     };
 
@@ -255,6 +262,7 @@ in
         Group = clamavGroup;
         PrivateTmp = "yes";
         PrivateDevices = "yes";
+        Slice = "system-clamav.slice";
       };
     };
 
@@ -275,6 +283,7 @@ in
       serviceConfig = {
         Type = "oneshot";
         ExecStart = "${cfg.package}/bin/clamdscan --multiscan --fdpass --infected --allmatch ${lib.concatStringsSep " " cfg.scanner.scanDirectories}";
+        Slice = "system-clamav.slice";
       };
     };
   };