Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2023-12-27 | Merge pull request #271326 from philiptaron/shutdown.target | nikstur | 4 | -5/+11 | |
treewide: depend on `shutdown.target` if `DefaultDependencies=no` in almost every case | |||||
2023-12-24 | nixos/wrapper: add basename of the wrapped program to the wrappers name to ↵ | Sandro Jäckel | 1 | -2/+2 | |
easily identify it Also fix the comment with test instructions | |||||
2023-12-24 | nixos/sudo-rs: Removed unused let-binding | nicoo | 1 | -2/+0 | |
Leftover from bcc2d1238a1c97347518812f224921d29aa3b3f8 | |||||
2023-12-11 | Merge pull request #270224 from SuperSandro2000/patch-2 | pennae | 1 | -8/+8 | |
nixos/acme: add syntax highlighting to code blocks | |||||
2023-12-10 | nixos/acme: add syntax highlighting to code blocks | Sandro | 1 | -8/+8 | |
2023-11-30 | nixos/suid-sgid-wrappers: ensure correct ordering w.r.t. shutdown.target | Philip Taron | 1 | -1/+2 | |
2023-11-30 | nixos/duosec: ensure correct ordering w.r.t. shutdown.target | Philip Taron | 1 | -2/+4 | |
2023-11-30 | nixos/auditd: ensure correct ordering w.r.t. shutdown.target | Philip Taron | 1 | -1/+3 | |
This looks like it's got a few other idiosyncrasies, but I'll leave it alone for now. | |||||
2023-11-30 | nixos/apparmor: ensure correct ordering w.r.t. shutdown.target | Philip Taron | 1 | -1/+2 | |
2023-11-30 | Merge pull request #261702 from h7x4/replace-mkoption-with-mkpackageoption | Weijia Wang | 1 | -8/+1 | |
treewide: use `mkPackageOption` | |||||
2023-11-27 | treewide: use `mkPackageOption` | h7x4 | 2 | -16/+2 | |
This commit replaces a lot of usages of `mkOption` with the package type, to be `mkPackageOption`, in order to reduce the amount of code. | |||||
2023-11-25 | nixos/sudo-rs: Move support for `pam_ssh_agent_auth(8)` to PAM's NixOS module | nicoo | 2 | -9/+8 | |
Similar to delroth's suggestion in #262790. | |||||
2023-11-25 | nixos/sudo-rs: Clarify `security.sudo-rs.enable`'s description | nicoo | 1 | -1/+2 | |
2023-11-25 | nixos/sudo-rs: Refactor option definitions | nicoo | 1 | -16/+4 | |
2023-11-25 | nixos/sudo-rs: refactor processing of `cfg.extraRules` | nicoo | 1 | -11/+10 | |
2023-11-25 | nixos/sudo-rs: Fix bug putting the wrong version of sudo in ↵ | nicoo | 1 | -2/+2 | |
`environment.systemPackages` | |||||
2023-11-25 | nixos/sudo-rs: Drop checks for sudo implementation | nicoo | 1 | -15/+3 | |
2023-11-25 | nixos/sudo-rs: uniformize ssh-agent auth behaviour with `security.sudo` | nicoo | 1 | -5/+2 | |
2023-11-25 | nixos/sudo-rs: Simplify activation | nicoo | 1 | -0/+6 | |
2023-11-21 | treewide: replace broken udev paths with systemd | ners | 1 | -2/+2 | |
2023-11-14 | nixos/acme: do not eat Let's Encrypt's request limits if misconfigured on ↵ | Léo Gaspard | 1 | -0/+4 | |
first try (#266155) | |||||
2023-11-14 | nixos/sudo: Update assertion message | nicoo | 1 | -4/+6 | |
2023-11-11 | Merge pull request #265727 from nbraud/nixos/sudo-rs/google_oslogin | Maciej Krüger | 1 | -0/+4 | |
2023-11-11 | treewide: fix redirected and broken URLs | Anthony Roussel | 2 | -5/+4 | |
Using the script in maintainers/scripts/update-redirected-urls.sh | |||||
2023-11-10 | nixos/sudo: enable by default | Yureka | 1 | -3/+9 | |
The default was accidentally changed to false in #262790 | |||||
2023-11-08 | nixos/sudo: refactor processing of `cfg.extraRules` | nicoo | 1 | -10/+10 | |
2023-11-08 | nixos/sudo: Make the default rules' options configurable | nicoo | 1 | -2/+11 | |
2023-11-08 | nixos/sudo: Handle `root`'s default rule through `extraRules` | nicoo | 1 | -24/+31 | |
This makes things more uniform; moreover, users can now inject rules before this. | |||||
2023-11-08 | nixos/sudo: Refactor option definitions | nicoo | 1 | -43/+28 | |
2023-11-08 | nixos/sudo: Move support for `pam_ssh_agent_auth(8)` to PAM's NixOS module | nicoo | 2 | -5/+9 | |
2023-11-05 | nixos/google_oslogin: Handle sudo-rs too | nicoo | 1 | -0/+4 | |
2023-11-05 | nixos/sudo: Don't include empty sections | nicoo | 1 | -4/+8 | |
This makes the generated sudoers a touch easier to read. | |||||
2023-11-03 | Merge pull request #263475 from nbraud/nixos/sudo-bugfix | Maximilian Bosch | 1 | -3/+1 | |
nixos/sudo: fix `security.sudo.package` | |||||
2023-10-28 | Merge pull request #263203 from nikstur/replace-activation | Linus Heckemann | 2 | -29/+43 | |
Replace simple activationScripts | |||||
2023-10-26 | nixos/sudo: fix `security.sudo.package` | nicoo | 1 | -3/+1 | |
2023-10-26 | nixos/acme: fix assertion, add actual values to message (#263543) | K900 | 1 | -8/+6 | |
2023-10-26 | nixos/duosec: replace activationScript | nikstur | 1 | -3/+12 | |
Replace with a separate systemd service. | |||||
2023-10-25 | nixos/acme: add s3Bucket option (#262806) | Yureka | 1 | -30/+27 | |
2023-10-24 | nixos/wrappers: replace activationScript | nikstur | 1 | -26/+31 | |
Create the wrappers via a separate systemd service. | |||||
2023-10-22 | Merge pull request #262666 from SuperSandro2000/patch-1 | Lin Jian | 1 | -1/+1 | |
nixos/acme: fix upstream documentation link | |||||
2023-10-22 | nixos/acme: fix upstream documentation link | Sandro | 1 | -1/+1 | |
2023-10-20 | Merge pull request #253764 from linj-fork/fix-ping-wrapper | Martin Weinelt | 1 | -6/+0 | |
nixos/network-interfaces: stop wrapping ping with cap_net_raw | |||||
2023-10-16 | Merge pull request #255547 from Majiir/pam-modular-rules | Silvan Mosberger | 1 | -356/+392 | |
nixos/pam: assemble rules from modular configuration | |||||
2023-10-11 | nixos/modules/security/wrappers: drop dead code | edef | 1 | -8/+0 | |
2023-10-10 | nixos/pam: add maintainer | Majiir Paktu | 1 | -0/+2 | |
2023-10-10 | nixos/pam: generate apparmor includes from rules | Majiir Paktu | 1 | -85/+13 | |
Removes redundant config from the module. Fixes a bug where some modules (e.g. ussh) were added to apparmor even though they had no rules enabled. | |||||
2023-10-10 | nixos/pam: add order comment to each rule line | Majiir Paktu | 1 | -0/+1 | |
2023-10-10 | nixos/pam: convert rules to attrs, add order field | Majiir Paktu | 1 | -7/+43 | |
Makes it possible to override properties of a rule by name. Introduces an 'order' field that can be overridden to change the sequence of rules. For now, the order value for each built-in rule is derived from its place in the hardcoded list of rules. | |||||
2023-10-10 | nixos/pam: remove empty text fields | Majiir Paktu | 1 | -177/+85 | |
2023-10-10 | nixos/pam: add settings option for common argument styles | Majiir Paktu | 1 | -163/+176 | |
Adds easily overrideable settings for the most common PAM argument styles. These are: - Flag (e.g. "use_first_pass"): rendered for true boolean values. false values are ignored. - Key-value (e.g. "action=validate"): rendered for non-null, non-boolean values. Most PAM arguments can be configured this way. Others can still be configured with the 'args' option. |