about summary refs log tree commit diff
path: root/nixos/modules/tasks/filesystems
diff options
context:
space:
mode:
authorKlemens Nanni <klemens@posteo.de>2022-05-03 15:39:50 +0200
committerKlemens Nanni <klemens@posteo.de>2022-05-03 15:56:54 +0200
commit2a341bd2f4c202781c118b46c6ecde75a2935e7e (patch)
tree8c46e9139a4746d35eeb446562bf7cdf62935455 /nixos/modules/tasks/filesystems
parent83beeb19acf9e39cfd941f5514dc55a3e63f4175 (diff)
downloadnixlib-2a341bd2f4c202781c118b46c6ecde75a2935e7e.tar
nixlib-2a341bd2f4c202781c118b46c6ecde75a2935e7e.tar.gz
nixlib-2a341bd2f4c202781c118b46c6ecde75a2935e7e.tar.bz2
nixlib-2a341bd2f4c202781c118b46c6ecde75a2935e7e.tar.lz
nixlib-2a341bd2f4c202781c118b46c6ecde75a2935e7e.tar.xz
nixlib-2a341bd2f4c202781c118b46c6ecde75a2935e7e.tar.zst
nixlib-2a341bd2f4c202781c118b46c6ecde75a2935e7e.zip
nixos/filesystems/zfs: Escape dataset names
Although unlikely, ZFS happily accepts names like 'zroot/foo -r'.

Escape names and separate command line options from arguments to avoid
any kind of misinterpretation.
Diffstat (limited to 'nixos/modules/tasks/filesystems')
-rw-r--r--nixos/modules/tasks/filesystems/zfs.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/tasks/filesystems/zfs.nix b/nixos/modules/tasks/filesystems/zfs.nix
index 5eca68798d5d..08f7fc1eba32 100644
--- a/nixos/modules/tasks/filesystems/zfs.nix
+++ b/nixos/modules/tasks/filesystems/zfs.nix
@@ -461,7 +461,7 @@ in
                 zfs load-key -a
               ''
               else concatMapStrings (fs: ''
-                zfs load-key ${fs}
+                zfs load-key -- ${escapeShellArg fs}
               '') cfgZfs.requestEncryptionCredentials}
         '') rootPools));
       };