nixpkgs/nixos/modules/security
rnhmjoj 1bd7260adb
nixos/lock-kernel-modules: reorder before/after
Moving the service before multi-user.target (so the `hardened` test
continue to work the way it did before) can result in locking the kernel
too early. It's better to lock it a bit later and changing the test to
wait specifically for the disable-kernel-module-loading.service.
2021-09-19 12:06:00 +02:00
..
apparmor apparmor: Fix cups-client typo 2021-08-23 00:50:15 -07:00
wrappers nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
acme.nix nixos/acme: harden systemd units 2021-07-06 15:16:01 +02:00
acme.xml docs: acme: Fix typo 2021-06-06 14:27:13 +02:00
apparmor.nix nixos/security/apparmor: utillinux -> util-linux 2021-05-17 17:14:08 +02:00
audit.nix nixos: Move uses of stdenv.shell to runtimeShell. 2018-03-01 14:38:53 -05:00
auditd.nix auditd service: make more useful 2019-06-10 18:55:11 +03:00
ca.nix nixos/security.pki: handle PEMs w/o a final newline 2021-05-16 17:23:11 -07:00
chromium-suid-sandbox.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
dhparams.nix dhparams module: add self as maintainer 2018-10-31 01:05:35 +09:00
doas.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
duosec.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
google_oslogin.nix nixos/google-oslogin: add to system.nssDatabases.group too 2020-05-11 16:14:50 +02:00
lock-kernel-modules.nix nixos/lock-kernel-modules: reorder before/after 2021-09-19 12:06:00 +02:00
misc.nix nixos/apparmor: improve code readability 2021-04-23 07:20:19 +02:00
oath.nix [bot] nixos/*: remove unused arguments in lambdas 2018-07-20 20:56:59 +00:00
pam_mount.nix nixos/pam_mount: add support for FUSE-filesystems (#126069) 2021-06-08 22:06:28 +02:00
pam_usb.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
pam.nix nixos: fix nobody/nogroup in security.wrappers 2021-09-13 13:48:13 +02:00
polkit.nix nixos: explicitely set security.wrappers ownership 2021-09-13 13:48:13 +02:00
rngd.nix nixos/rngd: Remove module entirely, leave an explaination 2021-02-21 01:32:50 +01:00
rtkit.nix nixos: define the primary group of users where needed 2021-09-12 14:59:30 +02:00
sudo.nix nixos/sudo: add option execWheelOnly 2021-05-08 23:48:00 +02:00
systemd-confinement.nix nixos/systemd-confinment: use /var/empty as chroot mountpoint 2021-07-01 08:01:18 +02:00
tpm2.nix nixos: remove StandardOutput=syslog, StandardError=syslog lines 2020-08-13 18:49:15 +02:00