From 54535a3dfb9285b677794783c39416369a9fe932 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Wed, 30 Sep 2015 20:59:16 +0200
Subject: trying to make /etc/shadow permissions permanent

---
 ymir.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ymir.nix b/ymir.nix
index 8f72e345..0a1c3410 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -122,6 +122,10 @@ in {
     members = [ "prosody"
               ];
   };
+  boot.postBootCommands = ''
+    chown root:shadow /etc/shadow
+    chmod 640 /etc/shadow
+  '';
   users.groups."xmpp" = {
     members = [ "gkleen"
               ];
-- 
cgit v1.2.3