commit ed25c9936e700365964046d5819510164c5c71b4 · pyrox.dev/nixpkgs

nixos/doc/manual/release-notes/rl-2311.section.md

···

       1313
       1313
        
       - When using [split parity files](https://www.snapraid.it/manual#7.1) in `snapraid`,

     

       1314
       1314
        
         the snapraid-sync systemd service will no longer fail to run.

     

       1315
       1315
        
       

     

       1316
       1316
       +
       - `wpa_supplicant`'s configuration file cannot be read by non-root users, and

     

       1317
       1317
       +
         secrets (such as Pre-Shared Keys) can safely be passed via

     

       1318
       1318
       +
         `networking.wireless.environmentFile`.

     

       1319
       1319
       +
       

     

       1320
       1320
       +
         The configuration file could previously be read, when `userControlled.enable` (non-default),

     

       1321
       1321
       +
         by users who are in both `wheel` and `userControlled.group` (defaults to `wheel`)

     

       1322
       1322
       +
       

     

       1323
       1323
       +
       

     

       1316
       1324
        
       ## Nixpkgs Library {#sec-release-23.11-nixpkgs-lib}

     

       1317
       1325
        
       

     

       1318
       1326
        
       ### Breaking Changes {#sec-release-23.11-lib-breaking}

nixos/modules/services/networking/wpa_supplicant.nix

···

       107
       107
        
             stopIfChanged = false;

     

       108
       108
        
       

     

       109
       109
        
             path = [ package ];

     

       110
       110
       +
             # if `userControl.enable`, the supplicant automatically changes the permissions

     

       111
       111
       +
             #  and owning group of the runtime dir; setting `umask` ensures the generated

     

       112
       112
       +
             #  config file isn't readable (except to root);  see nixpkgs#267693

     

       113
       113
       +
             serviceConfig.UMask = "066";

     

       110
       114
        
             serviceConfig.RuntimeDirectory = "wpa_supplicant";

     

       111
       115
        
             serviceConfig.RuntimeDirectoryMode = "700";

     

       112
       116
        
             serviceConfig.EnvironmentFile = mkIf (cfg.environmentFile != null)