Martin Weinelt
8739f8cd7b
nixos/babeld: update hardening
2021-06-20 13:52:49 +02:00
Martin Weinelt
4e66e9aea5
nixos/babeld: start maintaining the module
2021-04-27 14:12:07 +02:00
Martin Weinelt
e8988f7a30
nixos/babeld: run as DynamicUser
...
The last bits to prevent babeld from running unprivileged was its
kernel_setup_interface routine, that wants to set per interface
rp_filter. This behaviour has been disabled in a patch that has been
submitted upstream at https://github.com/jech/babeld/pull/68 and reuses
the skip-kernel-setup config option.
→ Overall exposure level for babeld.service: 1.7 OK 🙂
2021-04-25 00:54:52 +02:00
Martin Weinelt
8e1e78a735
nixos/babeld: allow AF_INET communication required for netlink socket
...
This broke after seccomp was updated from 2.5.0 to 2.5.1 in 22148780
2021-04-13 02:41:54 +02:00
Scriptkiddi
26c4dcf8fa
nixos/babeld: add type extraConfig
2021-01-26 20:06:29 -08:00
Martin Weinelt
c821e0d4be
nixos/babeld: lock down service
...
→ Overall exposure level for babeld.service: 2.2 OK 🙂
2020-10-21 12:26:02 +02:00
Dominik Xaver Hörl
0412bde942
treewide: add bool type to enable options, or make use of mkEnableOption
...
Add missing type information to manually specified enable options or replace them by mkEnableOption where appropriate.
2020-04-21 08:55:36 +02:00
volth
35d68ef143
treewide: remove redundant quotes
2019-08-26 21:40:19 +00:00
Andreas Rammhold
5feed06535
babeld module: updated example config
...
Previosuly the example config did feature the deprecated `wired`
paramter. Wired can now be configured using the `type` parameter.
2017-11-10 11:54:21 +01:00
Andreas Rammhold
5d9073747a
babeld module: support non-boolean default arguments
...
Previosuly only boolean values would be rendered properly. All other
values would cause an error. Even the example configuration did fail.
2017-11-10 11:54:15 +01:00
Andreas Rammhold
236a7c5452
babeld module: separate default options by space
...
In the previous version multiple default values would generate an
invalid babeld config file since all options would be concatenated
without any separator.
2017-11-10 11:54:08 +01:00
Markus Mueller
4874862732
babeld module: init
2017-11-05 21:15:23 +01:00
