about summary refs log tree commit diff
path: root/nixos/modules/security/wrappers
AgeCommit message (Expand)AuthorFilesLines
2024-04-13nixos: remove all uses of lib.mdDocstuebinm1-11/+11
2024-02-01nixos/modules/security/wrappers: limit argv0 to 512 bytesedef1-0/+7
2023-12-29nixos/wrappers: order service after sysusers servicenikstur1-0/+1
2023-12-27Merge pull request #271326 from philiptaron/shutdown.targetnikstur1-1/+2
2023-12-24nixos/wrapper: add basename of the wrapped program to the wrappers name to ea...Sandro Jäckel1-2/+2
2023-11-30nixos/suid-sgid-wrappers: ensure correct ordering w.r.t. shutdown.targetPhilip Taron1-1/+2
2023-10-24nixos/wrappers: replace activationScriptnikstur1-26/+31
2023-10-11nixos/modules/security/wrappers: drop dead codeedef1-8/+0
2023-10-10nixos/security/wrappers: don't force PIE hardening (#259509)Ben Wolsieffer1-1/+0
2023-10-05nixos/security/wrappers: use musl rather than glibc and explicitly unset inse...edef3-3/+73
2023-08-27nixos/security/wrappers: remove all the assertions about readlink(/proc/self/...Robert Obryk3-84/+2
2023-08-27nixos/security/wrappers: read capabilities off /proc/self/exe directlyRobert Obryk1-1/+1
2023-08-27nixos/security/wrappers: stop using `.real` filesRobert Obryk3-32/+16
2023-08-27nixos/security/wrappers: generate a separate and more complete apparmor polic...Robert Obryk1-3/+6
2023-08-24Revert "nixos/security/wrappers: simplifications and a fix for #98863"Pierre Bourdon3-13/+110
2023-08-16nixos/security/wrappers: remove all the assertions about readlink(/proc/self/...Robert Obryk3-84/+2
2023-08-16nixos/security/wrappers: read capabilities off /proc/self/exe directlyRobert Obryk1-1/+1
2023-08-16nixos/security/wrappers: stop using `.real` filesRobert Obryk3-30/+15
2023-08-09nixos/wrappers: allow setuid and setgid wrappers to run in user namespacesGuillaume Girol1-6/+34
2023-05-11nixos: Use checks instead of extraDependenciesRobert Hensing1-1/+1
2022-12-17nixos: fix typosfigsoda1-1/+1
2022-09-11nixos/security/wrappers: clarify required format for capabilitiesJason Yundt1-4/+5
2022-08-31nixos/*: convert options with admonitions to MDpennae1-10/+10
2022-08-31nixos/*: convert internal option descriptions to MDpennae1-1/+1
2022-08-31nixos/*: automatically convert option descriptionspennae1-1/+1
2022-08-14Merge pull request #184368 from DieracDelta/jr/wrappers-run-size-optionRobert Hensing1-1/+11
2022-08-14nixos/security: add size option to /run/wrappersJustin Restivo1-1/+11
2022-08-05nixos/*: normalize manpage references to single-line formpennae1-4/+1
2022-07-30treewide: automatically md-convert option descriptionspennae1-11/+11
2022-06-12Revert "nixos/security/wrappers: use an assertion for the existence check"Mario Rodas1-9/+31
2022-06-11nixos/security/wrappers: use an assertion for the existence checkNaïm Favier1-31/+9
2022-05-16Merge pull request #156822 from xfix/wrapper-assert-argc-at-least-oneLinus Heckemann1-17/+21
2022-05-05nixos/security/wrappers: chown user:group instead of user.group to fix warnin...Ivan Kozik1-2/+2
2022-02-19treewide: remove obsolete kernel version checksAlyssa Ross1-1/+0
2022-01-28nixos/wrappers: require argc to be at least oneKonrad Borowski1-0/+1
2022-01-28nixos/wrappers: create a new assert macro that always assertsKonrad Borowski1-17/+20
2021-12-29security/wrappers: remove C compiler from the nixos/security.wrappers AppArmo...Julien Moutinho1-2/+0
2021-10-04nixos/doc: clean up defaults and examplesNaïm Favier1-1/+1
2021-09-13nixos: explicitely set security.wrappers ownershiprnhmjoj1-17/+40
2021-09-13nixos/security/wrappers: remove WRAPPER_PATHrnhmjoj1-4/+0
2021-09-13nixos/security/wrappers: fix shell quotingrnhmjoj1-18/+18
2021-09-13nixos/security/wrappers: check that sources existrnhmjoj1-1/+29
2021-09-12nixos/security/wrappers: use fixed defaultsrnhmjoj1-25/+10
2021-09-12nixos/security/wrappers: make well-typedrnhmjoj1-57/+119
2021-04-23Revert "Revert "apparmor: fix and improve the service""Julien Moutinho1-0/+8
2021-01-14Update nixos/modules/security/wrappers/wrapper.nixJörg Thalheim1-1/+1
2021-01-14nixos/wrappers: fix applying capabilitiesJörg Thalheim3-178/+185
2020-11-24utillinux: rename to util-linuxGraham Christensen1-2/+2
2020-10-07Revert "apparmor: fix and improve the service"Vladimír Čunát1-8/+0
2020-09-28nixos/security/wrapper: ensure the tmpfs is not world writeableAndreas Rammhold1-1/+6