about summary refs log tree commit diff
path: root/nixpkgs/nixos/modules/tasks/network-interfaces.nix
diff options
context:
space:
mode:
authorAlyssa Ross <hi@alyssa.is>2023-09-14 13:17:39 +0000
committerAlyssa Ross <hi@alyssa.is>2023-09-14 13:17:39 +0000
commit56e87d10ec12e00eab5c4b5710e01ab50eec267f (patch)
treebaff33c3da97619d02441379b3f0f369da8f3d5a /nixpkgs/nixos/modules/tasks/network-interfaces.nix
parentcc14c6e02d8424c1d446d248f71e08243181af8d (diff)
parent3a2786eea085f040a66ecde1bc3ddc7099f6dbeb (diff)
downloadnixlib-56e87d10ec12e00eab5c4b5710e01ab50eec267f.tar
nixlib-56e87d10ec12e00eab5c4b5710e01ab50eec267f.tar.gz
nixlib-56e87d10ec12e00eab5c4b5710e01ab50eec267f.tar.bz2
nixlib-56e87d10ec12e00eab5c4b5710e01ab50eec267f.tar.lz
nixlib-56e87d10ec12e00eab5c4b5710e01ab50eec267f.tar.xz
nixlib-56e87d10ec12e00eab5c4b5710e01ab50eec267f.tar.zst
nixlib-56e87d10ec12e00eab5c4b5710e01ab50eec267f.zip
Merge branch 'nixos-unstable' of https://github.com/NixOS/nixpkgs
Diffstat (limited to 'nixpkgs/nixos/modules/tasks/network-interfaces.nix')
-rw-r--r--nixpkgs/nixos/modules/tasks/network-interfaces.nix6
1 files changed, 2 insertions, 4 deletions
diff --git a/nixpkgs/nixos/modules/tasks/network-interfaces.nix b/nixpkgs/nixos/modules/tasks/network-interfaces.nix
index eb1c7512d920..0d4033ca9430 100644
--- a/nixpkgs/nixos/modules/tasks/network-interfaces.nix
+++ b/nixpkgs/nixos/modules/tasks/network-interfaces.nix
@@ -1396,14 +1396,12 @@ in
     security.apparmor.policies."bin.ping".profile = lib.mkIf config.security.apparmor.policies."bin.ping".enable (lib.mkAfter ''
       /run/wrappers/bin/ping {
         include <abstractions/base>
-        include <nixos/security.wrappers>
+        include <nixos/security.wrappers/ping>
         rpx /run/wrappers/wrappers.*/ping,
       }
       /run/wrappers/wrappers.*/ping {
         include <abstractions/base>
-        include <nixos/security.wrappers>
-        r /run/wrappers/wrappers.*/ping.real,
-        mrpx ${config.security.wrappers.ping.source},
+        include <nixos/security.wrappers/ping>
         capability net_raw,
         capability setpcap,
       }