From a324f9a521967a0812051ca310237b0b853d6584 Mon Sep 17 00:00:00 2001 From: JuergenReppSIT Date: Tue, 24 Feb 2026 20:26:45 +0100 Subject: [PATCH] nixos/tpm2: fix access rights keystore Add write permissions for tss group for tpm2-tss keystore to enable provisioning for users in tss group. Signed-off-by: JuergenReppSIT --- nixos/modules/security/tpm2.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/security/tpm2.nix b/nixos/modules/security/tpm2.nix index cf1535e25ac3..b7e5bdd98cd6 100644 --- a/nixos/modules/security/tpm2.nix +++ b/nixos/modules/security/tpm2.nix @@ -381,7 +381,7 @@ in environment.etc."tpm2-tss/fapi-config.json".source = fapiConfig; systemd.tmpfiles.rules = [ "d ${cfg.fapi.logDir} 2750 ${cfg.tssUser} ${cfg.tssGroup} -" - "d ${cfg.fapi.systemDir} 2750 root ${cfg.tssGroup} -" + "d ${cfg.fapi.systemDir} 2770 root ${cfg.tssGroup} -" ]; } ]