gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/chrony: change chrony.keys owner to prevent chronyd user write access

Browse Source
This commit is contained in:
royce-c
2026-02-12 17:14:57 -08:00
parent a4100290f3
commit e81b4fb88a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/networking/ntp/chrony.nix
+1 -1
View File
@@ -276,7 +276,7 @@ in
systemd.tmpfiles.rules = [
"d ${stateDir} 0750 chrony chrony - -"
"f ${driftFile} 0640 chrony chrony - -"
"f ${keyFile} 0640 chrony chrony - -"
"f ${keyFile} 0640 root chrony - -"
]
++ lib.optionals cfg.enableRTCTrimming [
"f ${rtcFile} 0640 chrony chrony - -"