trying to make /etc/shadow permissions permanent

1 files changed, 4 insertions, 0 deletions

diff --git a/ymir.nix b/ymir.nix
index 8f72e345..0a1c3410 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -122,6 +122,10 @@ in {
     members = [ "prosody"
               ];
   };
+  boot.postBootCommands = ''
+    chown root:shadow /etc/shadow
+    chmod 640 /etc/shadow
+  '';
   users.groups."xmpp" = {
     members = [ "gkleen"
               ];