Unverified Commit e81b4fb8 authored by royce-c's avatar royce-c
Browse files

nixos/chrony: change chrony.keys owner to prevent chronyd user write access

parent a4100290

nixos/modules/services/networking/ntp/chrony.nix

+1 −1
Original line number Diff line number Diff line
@@ -276,7 +276,7 @@ in 
    systemd.tmpfiles.rules = [

      "d ${stateDir} 0750 chrony chrony - -"

      "f ${driftFile} 0640 chrony chrony - -"

      "f ${keyFile} 0640 chrony chrony - -"

      "f ${keyFile} 0640 root chrony - -"

    ]

    ++ lib.optionals cfg.enableRTCTrimming [

      "f ${rtcFile} 0640 chrony chrony - -"