Commit Graph

1 Commits

Author SHA1 Message Date
Tom Fitzhenry
725777250b nixos/shadow: introduce security.shadow.enable
Allow users to disable the shadow authentication suite.

My primary motivation is to reduce the attack surface via setuid
binaries, which shadow understandably introduces many. I realised,
however, that I don't use any of these.

The test demonstrates login working without needing the shadow suite.
2024-06-11 19:28:32 +10:00