about summary refs log tree commit diff
path: root/nixos/modules/security
AgeCommit message (Expand)AuthorFilesLines
2024-02-02nixos/pam: Add pam_intuneRhys Davies1-0/+3
2024-02-01Merge pull request #285587 from edef1c/wrapper-cve-2023-6246Pierre Bourdon1-0/+7
2024-02-01nixos/modules/security/wrappers: limit argv0 to 512 bytesedef1-0/+7
2024-01-31nixos/pam: remove pam_cgfsAdam Stephens1-3/+0
2024-01-19nixos/acme: fix assertion for renamed optionéclairevoyant1-2/+2
2024-01-18fix semi-colon missingmian | mian1-5/+5
2024-01-10Merge pull request #243169 from 2xsaiko/outgoing/krb5Peder Bergebakken Sundt4-5/+183
2024-01-08nixos/pam: Fix use of renamed `enableSSHAgentAuth` optionnicoo1-1/+1
2024-01-08Merge pull request #277620 from nbraud/nixos/pam/ssh-agent-auth-31611Maciej Krüger2-14/+41
2024-01-07Merge pull request #276499 from nbraud/nixos/pam/ssh-agent-authMaciej Krüger1-0/+7
2024-01-04nixos/sudo: Remove unused `enableSSHAgentAuth` let-bindingnicoo1-2/+0
2024-01-04nixos/pam: Warn on insecure `sshAgentAuth` configurationsnicoo1-0/+10
2024-01-03nixos/pam: Add `sshAgentAuth.authorizedKeysFiles` optionnicoo1-1/+24
2024-01-03nixos/pam: Rename option `enableSSHAgentAuth` to `sshAgentAuth.enable`nicoo1-12/+8
2024-01-01nixos/auditd: fix typoMaciej Krüger1-1/+1
2023-12-30nixos/pam: Assert that `authorizedKeysFiles` is non-empty when using `pam_ssh...nicoo1-0/+7
2023-12-29nixos/wrappers: order service after sysusers servicenikstur1-0/+1
2023-12-29nixos/ipa: replace activationScriptnikstur1-19/+27
2023-12-27Merge pull request #271326 from philiptaron/shutdown.targetnikstur4-5/+11
2023-12-24nixos/wrapper: add basename of the wrapped program to the wrappers name to ea...Sandro Jäckel1-2/+2
2023-12-24nixos/sudo-rs: Removed unused let-bindingnicoo1-2/+0
2023-12-21nixos/krb5: add h7x4 as maintainerMarco Rebhan1-1/+1
2023-12-21nixos/krb5: add myself as maintainer for module & testsMarco Rebhan1-0/+4
2023-12-21nixos/krb5: move to security.krb5Marco Rebhan4-5/+179
2023-12-11Merge pull request #270224 from SuperSandro2000/patch-2pennae1-8/+8
2023-12-10nixos/acme: add syntax highlighting to code blocksSandro1-8/+8
2023-11-30nixos/suid-sgid-wrappers: ensure correct ordering w.r.t. shutdown.targetPhilip Taron1-1/+2
2023-11-30nixos/duosec: ensure correct ordering w.r.t. shutdown.targetPhilip Taron1-2/+4
2023-11-30nixos/auditd: ensure correct ordering w.r.t. shutdown.targetPhilip Taron1-1/+3
2023-11-30nixos/apparmor: ensure correct ordering w.r.t. shutdown.targetPhilip Taron1-1/+2
2023-11-30Merge pull request #261702 from h7x4/replace-mkoption-with-mkpackageoptionWeijia Wang1-8/+1
2023-11-27treewide: use `mkPackageOption`h7x42-16/+2
2023-11-25nixos/sudo-rs: Move support for `pam_ssh_agent_auth(8)` to PAM's NixOS modulenicoo2-9/+8
2023-11-25nixos/sudo-rs: Clarify `security.sudo-rs.enable`'s descriptionnicoo1-1/+2
2023-11-25nixos/sudo-rs: Refactor option definitionsnicoo1-16/+4
2023-11-25nixos/sudo-rs: refactor processing of `cfg.extraRules`nicoo1-11/+10
2023-11-25nixos/sudo-rs: Fix bug putting the wrong version of sudo in `environment.syst...nicoo1-2/+2
2023-11-25nixos/sudo-rs: Drop checks for sudo implementationnicoo1-15/+3
2023-11-25nixos/sudo-rs: uniformize ssh-agent auth behaviour with `security.sudo`nicoo1-5/+2
2023-11-25nixos/sudo-rs: Simplify activationnicoo1-0/+6
2023-11-21treewide: replace broken udev paths with systemdners1-2/+2
2023-11-14nixos/acme: do not eat Let's Encrypt's request limits if misconfigured on fir...Léo Gaspard1-0/+4
2023-11-14nixos/sudo: Update assertion messagenicoo1-4/+6
2023-11-11Merge pull request #265727 from nbraud/nixos/sudo-rs/google_osloginMaciej Krüger1-0/+4
2023-11-11treewide: fix redirected and broken URLsAnthony Roussel2-5/+4
2023-11-10nixos/sudo: enable by defaultYureka1-3/+9
2023-11-08nixos/sudo: refactor processing of `cfg.extraRules`nicoo1-10/+10
2023-11-08nixos/sudo: Make the default rules' options configurablenicoo1-2/+11
2023-11-08nixos/sudo: Handle `root`'s default rule through `extraRules`nicoo1-24/+31
2023-11-08nixos/sudo: Refactor option definitionsnicoo1-43/+28