about summary refs log tree commit diff
path: root/nixos/modules/profiles
AgeCommit message (Expand)AuthorFilesLines
2019-10-16Revert "installer: Disable udisks"Franz Pletz1-3/+0
2019-10-12nixos/hardened: blacklist old filesystems (#70482)Joachim F1-0/+21
2019-09-18qemu-guest: allow to override security.rngdMatthieu Coudron1-2/+2
2019-08-31Merge pull request #63773 from flokli/installation-device-fixesFlorian Klink1-7/+10
2019-08-19Merge pull request #66687 from joachifm/feat/hardened-nixos-revert-graphene-m...Marek Mahut1-2/+0
2019-08-19nixos/installation-device.nix: explain sshd usageFlorian Klink1-7/+10
2019-08-18nixos/systemd: install sysctl snippetsFlorian Klink1-11/+5
2019-08-15Revert "nixos/hardened: use graphene-hardened malloc by default"Joachim Fasting1-2/+0
2019-08-15nixos-hardened: disable unprivileged userfaultfd syscallsJoachim Fasting1-0/+3
2019-08-15nixos-hardened: enable page alloc randomizationJoachim Fasting1-0/+3
2019-08-12installer: Don't run as rootworldofpeace1-7/+20
2019-07-30nixos/hardened: make pti=on overridablePierre Bourdon1-3/+2
2019-07-19Renaming security.virtualization.flushL1DataCache to virtualisationMarek Mahut1-1/+1
2019-07-04nixos/hardened: harder inet defaultsJoachim Fasting1-0/+30
2019-07-04nixos/hardened: disable ftrace by defaultJoachim Fasting1-0/+3
2019-05-07nixos/hardened: use graphene-hardened malloc by defaultJoachim Fasting1-0/+2
2019-02-22profiles/graphical.nix: Enable pulseaudio for virtualbox appliancesElis Hirwing1-0/+4
2019-01-31types.optionSet: deprecate and remove last usagesdanbst1-1/+1
2019-01-13modules/profiles/minimal: sound is disabled by defaultProfpatsch2-2/+1
2019-01-05nixos/hardened profile: always enable ptiJoachim Fasting1-0/+3
2019-01-05nixos/hardened profile: slab/slub hardeningJoachim Fasting1-0/+6
2018-12-27nixos/security/misc: expose SMT control optionJoachim Fasting1-0/+2
2018-12-27nixos/security/misc: expose l1tf mitigation optionJoachim Fasting1-0/+2
2018-12-27nixos/security/misc: factor out protectKernelImageJoachim Fasting1-6/+2
2018-11-26Revert "zfs cannot be distributed. Disabling it in the isos."Graham Christensen1-1/+1
2018-11-26Merge branch 'master' of https://github.com/nixos/nixpkgs into tarball-closur...Ding Xiang Fei1-0/+2
2018-11-24nixos/hardened: restrict access to nix daemonJoachim Fasting1-0/+2
2018-11-14Merge branch 'master' of https://github.com/nixos/nixpkgs into tarball-closur...Ding Xiang Fei1-1/+1
2018-11-07use closure-info for building system tarballDing Xiang Fei1-6/+10
2018-10-30Merge pull request #49326 from c0bw3b/nixos/installation-deviceEelco Dolstra1-1/+1
2018-10-28Merge pull request #48801 from matthewbauer/cloneConfigExtraMatthew Bauer1-0/+9
2018-10-28installation-device: set GC initial heap size to 1MBRenaud1-1/+1
2018-10-27nixos/installation-device: Move systemPackages additions to profiles/baseTuomas Tynkkynen2-3/+3
2018-10-27nixos/installer: Drop extra copy of w3mTuomas Tynkkynen1-1/+1
2018-10-21ova: add cloneConfigExtra optionMatthew Bauer1-0/+9
2018-10-15Merge pull request #48439 from joachifm/hardened-miscJoachim F1-12/+2
2018-10-15nixos/security/misc: initJoachim Fasting1-12/+2
2018-10-15nixos/hardened: add myself to maintainersJoachim Fasting1-0/+4
2018-09-25nixos: Fix eval error for documentation.nixosaszlig1-0/+1
2018-09-25Merge pull request #47298 from oxij/nixos/doc-in-installerMichael Raskin2-2/+1
2018-09-24Merge pull request #47296 from matthewbauer/closure-size-reductionsxeji1-1/+4
2018-09-24nixos: doc: fix minimal profile and installer configsJan Malakhovski2-2/+1
2018-09-24nixos: don’t enableQt4Support for installer profileMatthew Bauer1-1/+4
2018-09-24Merge pull request #46193 from oxij/nixos/manual-to-docSamuel Dionne-Riel2-2/+2
2018-09-23nixos: doc: move non-service parts of `service.nixosManual` to `documentation...Jan Malakhovski2-2/+2
2018-09-22nixos: make firefox default browserMatthew Bauer1-1/+1
2018-08-23usb-storage -> uasvolth1-1/+1
2018-08-17nixos: Fix iso_graphical evaluationTuomas Tynkkynen1-2/+2
2018-08-17installer: Disable udisksTuomas Tynkkynen1-0/+1
2018-08-07set initialHashedPassword in installation-device.nixBob van der Linden1-0/+4