diff --git a/nixos/modules/services/web-apps/cryptpad.nix b/nixos/modules/services/web-apps/cryptpad.nix
index 770eefc007395..5f308f6e0a346 100644
--- a/nixos/modules/services/web-apps/cryptpad.nix
+++ b/nixos/modules/services/web-apps/cryptpad.nix
@@ -195,7 +195,7 @@ in
           SystemCallFilter = [
             "@pkey"
             "@system-service"
-            "~@chown"
+            "@chown"
             "~@keyring"
             "~@memlock"
             "~@privileged"