about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorEelco Dolstra <eelco.dolstra@logicblox.com>2014-04-23 17:45:46 +0200
committerEelco Dolstra <eelco.dolstra@logicblox.com>2014-04-24 15:19:10 +0200
commitd4986b5fd3ee75d489828d8d7048d8eb60f14c21 (patch)
tree9ee8da1dbb2ef59ae9d8cc20429bf4135a3a2449 /nixos
parenta2fad897235fcad6e90c7d0b03a228786c46c9f9 (diff)
downloadnixlib-d4986b5fd3ee75d489828d8d7048d8eb60f14c21.tar
nixlib-d4986b5fd3ee75d489828d8d7048d8eb60f14c21.tar.gz
nixlib-d4986b5fd3ee75d489828d8d7048d8eb60f14c21.tar.bz2
nixlib-d4986b5fd3ee75d489828d8d7048d8eb60f14c21.tar.lz
nixlib-d4986b5fd3ee75d489828d8d7048d8eb60f14c21.tar.xz
nixlib-d4986b5fd3ee75d489828d8d7048d8eb60f14c21.tar.zst
nixlib-d4986b5fd3ee75d489828d8d7048d8eb60f14c21.zip
Don't create world-readable swapfiles
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/config/swap.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/config/swap.nix b/nixos/modules/config/swap.nix
index 427b2519cbdf..ac1c32387c5e 100644
--- a/nixos/modules/config/swap.nix
+++ b/nixos/modules/config/swap.nix
@@ -106,6 +106,7 @@ with utils;
                 if [ ! -e "${sw.device}" ]; then
                   fallocate -l ${toString sw.size}M "${sw.device}" ||
                     dd if=/dev/zero of="${sw.device}" bs=1M count=${toString sw.size}
+                  chmod 0600 ${sw.device}
                   mkswap ${sw.device}
                 fi
               '';