Merge pull request #146241 from rgrunbla/wpa_supplicant-fix-writable

wpa_supplicant: prevent writing non-writable configuration
2 years ago · 2b85441bb0
parent 5c737e23c6 9b2faeb38e
commit 2b85441bb0
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/networking/supplicant.nix
+++ b/nixos/modules/services/networking/supplicant.nix
@ -43,7 +43,7 @@ let
        path = [ pkgs.coreutils ];

        preStart = ''
-          ${optionalString (suppl.configFile.path!=null) ''
+          ${optionalString (suppl.configFile.path!=null && suppl.configFile.writable) ''
            (umask 077 && touch -a "${suppl.configFile.path}")
          ''}
          ${optionalString suppl.userControlled.enable ''