Provide submodule to security.wrappers
for older kernels
Fixes a regression from #126289
This commit is contained in:
parent
31ffc50c57
commit
110165b784
@ -1139,11 +1139,13 @@ in
|
|||||||
source = "${pkgs.iputils.out}/bin/ping";
|
source = "${pkgs.iputils.out}/bin/ping";
|
||||||
};
|
};
|
||||||
} else {
|
} else {
|
||||||
|
ping = {
|
||||||
setuid = true;
|
setuid = true;
|
||||||
owner = "root";
|
owner = "root";
|
||||||
group = "root";
|
group = "root";
|
||||||
source = "${pkgs.iputils.out}/bin/ping";
|
source = "${pkgs.iputils.out}/bin/ping";
|
||||||
};
|
};
|
||||||
|
};
|
||||||
security.apparmor.policies."bin.ping".profile = lib.mkIf config.security.apparmor.policies."bin.ping".enable (lib.mkAfter ''
|
security.apparmor.policies."bin.ping".profile = lib.mkIf config.security.apparmor.policies."bin.ping".enable (lib.mkAfter ''
|
||||||
/run/wrappers/bin/ping {
|
/run/wrappers/bin/ping {
|
||||||
include <abstractions/base>
|
include <abstractions/base>
|
||||||
|
Loading…
Reference in New Issue
Block a user