Merge pull request #139957 from samueldr/fix/126289-regression
Provide submodule to `security.wrappers` for older kernels
commiteaf85fe8c7c036676fc4975452198bcfa1f9e311
authorSamuel Dionne-Riel <samuel@dionne-riel.com>
dateWed 29 Sep 2021, 18:30 (5 years ago)
parent90d31cc110165b
nixos/modules/tasks/network-interfaces.nix+6−4
@@ -1139,10 +1139,12 @@ in
11391139 source = "${pkgs.iputils.out}/bin/ping";
11401140 };
11411141 } else {
1142− setuid = true;
1143− owner = "root";
1144− group = "root";
1145− source = "${pkgs.iputils.out}/bin/ping";
1142+ ping = {
1143+ setuid = true;
1144+ owner = "root";
1145+ group = "root";
1146+ source = "${pkgs.iputils.out}/bin/ping";
1147+ };
11461148 };
11471149 security.apparmor.policies."bin.ping".profile = lib.mkIf config.security.apparmor.policies."bin.ping".enable (lib.mkAfter ''
11481150 /run/wrappers/bin/ping {