Group has no business having write access to the nix.conf

DeterminateSystems · Sep 30, 2024 · 9ab8a70 · 9ab8a70
1 parent 2bcc104
commit 9ab8a70
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/action/base/create_or_merge_nix_config.rs b/src/action/base/create_or_merge_nix_config.rs
@@ -18,7 +18,7 @@ use crate::action::{
 /// The `nix.conf` configuration names that are safe to merge.
 // FIXME(@cole-h): make configurable by downstream users?
 const MERGEABLE_CONF_NAMES: &[&str] = &["experimental-features"];
-const NIX_CONF_MODE: u32 = 0o664;
+const NIX_CONF_MODE: u32 = 0o644;
 const NIX_CONF_COMMENT_CHAR: char = '#';
 
 #[non_exhaustive]