nixos/update-users-groups: read access to /etc/shadow for group shadow

NixOS · Mar 18, 2021 · 099a9e8 · 099a9e8
1 parent 4307699
commit 099a9e8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nixos/modules/config/update-users-groups.pl b/nixos/modules/config/update-users-groups.pl
@@ -288,7 +288,7 @@ sub parseUser {
     push @shadowNew, join(":", $u->{name}, $hashedPassword, "1::::::") . "\n";
 }
 
-updateFile("/etc/shadow", \@shadowNew, 0600);
+updateFile("/etc/shadow", \@shadowNew, 0640);
 {
     my $uid = getpwnam "root";
     my $gid = getgrnam "shadow";