Merge pull request #54954 from costrouc/munge-module-key-permissions

munge: fix module munge.key permissions from 0700 -> 0400 readonly
2019-01-30 18:28:08 +00:00
parent bfd2c8065f 5a5def3753
commit 293a5c90ca
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/security/munge.nix
+++ b/nixos/modules/services/security/munge.nix
@@ -50,7 +50,7 @@ in
      path = [ pkgs.munge pkgs.coreutils ];

      preStart = ''
-        chmod 0700 ${cfg.password}
+        chmod 0400 ${cfg.password}
        mkdir -p /var/lib/munge -m 0711
        chown -R munge:munge /var/lib/munge
        mkdir -p /run/munge -m 0755