nixpkgs/nixos/modules/security
Eelco Dolstra 01dbf03628
network-link-*.service: Set stopIfChanged = false
This reduces the time window during which IP addresses are gone during
switch-to-configuration. A complication is that with stopIfChanged =
true, preStop would try to delete the *new* IP addresses rather than
the old one (since the preStop script now runs after the switch to the
new configuration). So we now record the actually configured addresses
in /run/nixos/network/addresses/<interface>. This is more robust in
any case.

Issue https://github.com/NixOS/nixops/issues/640.
2017-04-04 15:13:49 +02:00
..
wrappers security-wrapper: link old wrapper dir to new one 2017-03-23 15:57:30 +01:00
acme.nix acme: Use chown -R for challenges directory. Fixes #24529. 2017-04-01 15:22:01 +02:00
acme.xml nixos docs: update for Nginx + ACME (#21320) 2017-01-09 06:39:10 +01:00
apparmor-suid.nix Getting rid of the var indirection and using a bin path instead 2017-01-29 04:11:01 -06:00
apparmor.nix apparmor: support for lxc profiles 2017-01-10 23:01:03 +01:00
audit.nix audit module: only enable service if kernel has audit (#19569) 2016-10-15 16:03:41 +02:00
ca.nix cacerts: refactor, add blacklist option 2016-10-09 02:00:18 +02:00
chromium-suid-sandbox.nix More derp 2017-01-29 05:33:56 -06:00
dhparams.nix dhparams module: condition on enable option (#23661) 2017-03-17 01:56:13 +01:00
duosec.nix More derp 2017-01-29 05:33:56 -06:00
grsecurity.nix nixos/treewide: remove boolean examples for options 2017-03-17 23:36:19 +01:00
grsecurity.xml gresecurity docs: fix incorrect option (#23789) 2017-03-12 15:05:14 +01:00
hidepid.nix hidepid: polkit and systemd-logind compatibility 2016-12-07 01:12:05 +01:00
hidepid.xml hidepid module: detailed description to external doc 2016-09-15 15:36:03 +02:00
oath.nix config.security.oath: new module 2016-02-25 13:52:45 +00:00
pam_mount.nix
pam_usb.nix More derp 2017-01-29 05:33:56 -06:00
pam.nix Remove top-level kde5 attribute 2017-02-27 11:49:10 -06:00
polkit.nix network-link-*.service: Set stopIfChanged = false 2017-04-04 15:13:49 +02:00
prey.nix
rngd.nix rngd: update modalias to match cpu type 2016-09-17 18:36:57 -07:00
rtkit.nix
sudo.nix More derp 2017-01-29 05:33:56 -06:00