Provide submodule to `security.wrappers` for older kernels
Fixes a regression from #126289
commit110165b784c838a46ac9ab8d6d300e7d3981b1a3
authorSamuel Dionne-Riel <samuel@dionne-riel.com>
dateWed 29 Sep 2021, 16:10 (5 years ago)
parent31ffc50
nixos/modules/tasks/network-interfaces.nix+6−4
@@ -1139,10 +1139,12 @@ in
11391139 source = "${pkgs.iputils.out}/bin/ping";
11401140 };
11411141 } else {
1142− setuid = true;
1143− owner = "root";
1144− group = "root";
1145− source = "${pkgs.iputils.out}/bin/ping";
1142+ ping = {
1143+ setuid = true;
1144+ owner = "root";
1145+ group = "root";
1146+ source = "${pkgs.iputils.out}/bin/ping";
1147+ };
11461148 };
11471149 security.apparmor.policies."bin.ping".profile = lib.mkIf config.security.apparmor.policies."bin.ping".enable (lib.mkAfter ''
11481150 /run/wrappers/bin/ping {