From 29e266f5427e26947acdbfa942775760f83ff115 Mon Sep 17 00:00:00 2001
From: Maxim Devaev <mdevaev@gmail.com>
Date: Thu, 28 Sep 2023 02:02:20 +0300
Subject: [PATCH] pikvm/pikvm#1115: 640 permissions to wpa config

---
 scripts/kvmd-bootconfig | 1 +
 1 file changed, 1 insertion(+)

diff --git a/scripts/kvmd-bootconfig b/scripts/kvmd-bootconfig
index 1ea68c2c..f4051363 100755
--- a/scripts/kvmd-bootconfig
+++ b/scripts/kvmd-bootconfig
@@ -191,6 +191,7 @@ DNSSEC=no
 ClientIdentifier=mac
 end_of_file
 	wpa_passphrase "$WIFI_ESSID" "$WIFI_PASSWD" > "/etc/wpa_supplicant/wpa_supplicant-$WIFI_IFACE.conf"
+	chmod 640 "/etc/wpa_supplicant/wpa_supplicant-$WIFI_IFACE.conf"
 	systemctl enable "wpa_supplicant@$WIFI_IFACE.service" || true
 	touch /boot/pikvm-reboot.txt
 fi