tree-wide: use READ_FULL_FILE_CONNECT_SOCKET at various places

[thirdparty/systemd.git] / src / network / netdev / wireguard.c

diff --git a/src/network/netdev/wireguard.c b/src/network/netdev/wireguard.c
index 9636ac77367d8c2f1a1b8ccf39c1caa2e87d051c..6812b07bff5e4b3d19162f8a3ff40c84f6be1676 100644 (file)
--- a/src/network/netdev/wireguard.c
+++ b/src/network/netdev/wireguard.c
@@ -888,7 +888,10 @@ static int wireguard_read_key_file(const char *filename, uint8_t dest[static WG_
 
         (void) warn_file_is_world_accessible(filename, NULL, NULL, 0);
 
-        r = read_full_file_full(AT_FDCWD, filename, READ_FULL_FILE_SECURE | READ_FULL_FILE_UNBASE64 | READ_FULL_FILE_WARN_WORLD_READABLE, &key, &key_len);
+        r = read_full_file_full(
+                        AT_FDCWD, filename,
+                        READ_FULL_FILE_SECURE | READ_FULL_FILE_UNBASE64 | READ_FULL_FILE_WARN_WORLD_READABLE | READ_FULL_FILE_CONNECT_SOCKET,
+                        &key, &key_len);
         if (r < 0)
                 return r;