about summary refs log tree commit diff
path: root/nixos/modules/security
AgeCommit message (Expand)AuthorFilesLines
2024-02-01nixos/modules/security/wrappers: limit argv0 to 512 bytes (#285593)github-actions[bot]1-0/+7
2023-11-26nixos/sudo-rs: Move support for `pam_ssh_agent_auth(8)` to PAM's NixOS modulenicoo2-9/+8
2023-11-26nixos/sudo-rs: Clarify `security.sudo-rs.enable`'s descriptionnicoo1-1/+2
2023-11-26nixos/sudo-rs: Refactor option definitionsnicoo1-16/+4
2023-11-26nixos/sudo-rs: refactor processing of `cfg.extraRules`nicoo1-11/+10
2023-11-26nixos/sudo-rs: Fix bug putting the wrong version of sudo in `environment.syst...nicoo1-2/+2
2023-11-26nixos/sudo-rs: Drop checks for sudo implementationnicoo1-15/+3
2023-11-26nixos/sudo-rs: uniformize ssh-agent auth behaviour with `security.sudo`nicoo1-5/+2
2023-11-26nixos/sudo-rs: Simplify activationnicoo1-0/+6
2023-11-21treewide: replace broken udev paths with systemdners1-2/+2
2023-11-14nixos/acme: do not eat Let's Encrypt's request limits if misconfigured on fir...Léo Gaspard1-0/+4
2023-11-14nixos/sudo: Update assertion messagenicoo1-4/+6
2023-11-11Merge pull request #265727 from nbraud/nixos/sudo-rs/google_osloginMaciej Krüger1-0/+4
2023-11-11treewide: fix redirected and broken URLsAnthony Roussel2-5/+4
2023-11-10nixos/sudo: enable by defaultYureka1-3/+9
2023-11-08nixos/sudo: refactor processing of `cfg.extraRules`nicoo1-10/+10
2023-11-08nixos/sudo: Make the default rules' options configurablenicoo1-2/+11
2023-11-08nixos/sudo: Handle `root`'s default rule through `extraRules`nicoo1-24/+31
2023-11-08nixos/sudo: Refactor option definitionsnicoo1-43/+28
2023-11-08nixos/sudo: Move support for `pam_ssh_agent_auth(8)` to PAM's NixOS modulenicoo2-5/+9
2023-11-05nixos/google_oslogin: Handle sudo-rs toonicoo1-0/+4
2023-11-05nixos/sudo: Don't include empty sectionsnicoo1-4/+8
2023-11-03Merge pull request #263475 from nbraud/nixos/sudo-bugfixMaximilian Bosch1-3/+1
2023-10-28Merge pull request #263203 from nikstur/replace-activationLinus Heckemann2-29/+43
2023-10-26nixos/sudo: fix `security.sudo.package`nicoo1-3/+1
2023-10-26nixos/acme: fix assertion, add actual values to message (#263543)K9001-8/+6
2023-10-26nixos/duosec: replace activationScriptnikstur1-3/+12
2023-10-25nixos/acme: add s3Bucket option (#262806)Yureka1-30/+27
2023-10-24nixos/wrappers: replace activationScriptnikstur1-26/+31
2023-10-22Merge pull request #262666 from SuperSandro2000/patch-1Lin Jian1-1/+1
2023-10-22nixos/acme: fix upstream documentation linkSandro1-1/+1
2023-10-20Merge pull request #253764 from linj-fork/fix-ping-wrapperMartin Weinelt1-6/+0
2023-10-16Merge pull request #255547 from Majiir/pam-modular-rulesSilvan Mosberger1-356/+392
2023-10-11nixos/modules/security/wrappers: drop dead codeedef1-8/+0
2023-10-10nixos/pam: add maintainerMajiir Paktu1-0/+2
2023-10-10nixos/pam: generate apparmor includes from rulesMajiir Paktu1-85/+13
2023-10-10nixos/pam: add order comment to each rule lineMajiir Paktu1-0/+1
2023-10-10nixos/pam: convert rules to attrs, add order fieldMajiir Paktu1-7/+43
2023-10-10nixos/pam: remove empty text fieldsMajiir Paktu1-177/+85
2023-10-10nixos/pam: add settings option for common argument stylesMajiir Paktu1-163/+176
2023-10-10nixos/security/wrappers: don't force PIE hardening (#259509)Ben Wolsieffer1-1/+0
2023-10-09nixos/pam: extract args fieldMajiir Paktu1-97/+190
2023-10-09nixos/pam: extract modulePath fieldMajiir Paktu1-174/+144
2023-10-09nixos/pam: extract control fieldMajiir Paktu1-172/+178
2023-10-09nixos/pam: give each rule a nameMajiir Paktu1-85/+91
2023-10-09nixos/pam: define rules as submodulesMajiir Paktu1-183/+205
2023-10-09nixos/pam: automatically populate rule typeMajiir Paktu1-86/+88
2023-10-09nixos/pam: extract header commentsMajiir Paktu1-182/+227
2023-10-05nixos/security/wrappers: use musl rather than glibc and explicitly unset inse...edef3-3/+73
2023-09-24nixos/pam: split rule lists into individual rulesMajiir Paktu1-0/+10