diff --git a/nixos/modules/security/lock-kernel-modules.nix b/nixos/modules/security/lock-kernel-modules.nix
index 51994ee76c1..260ec3fc946 100644
--- a/nixos/modules/security/lock-kernel-modules.nix
+++ b/nixos/modules/security/lock-kernel-modules.nix
@@ -25,7 +25,7 @@ with lib;
 
       script = "echo -n 1 > /proc/sys/kernel/modules_disabled";
 
-      unitConfig.ConditionPathIsWritable = "/proc/sys/kernel";
+      unitConfig.ConditionPathIsReadWrite = "/proc/sys/kernel";
 
       serviceConfig = {
         Type = "oneshot";