wpa_supplicant: prevent writing non-writable configuration

3 years ago · 9b2faeb38e
parent c6b332cb1a
commit 9b2faeb38e
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/networking/supplicant.nix
+++ b/nixos/modules/services/networking/supplicant.nix
@ -43,7 +43,7 @@ let
        path = [ pkgs.coreutils ];

        preStart = ''
-          ${optionalString (suppl.configFile.path!=null) ''
+          ${optionalString (suppl.configFile.path!=null && suppl.configFile.writable) ''
            (umask 077 && touch -a "${suppl.configFile.path}")
          ''}
          ${optionalString suppl.userControlled.enable ''